Encryption narrows FTC breach notification duty for tax firms
Encrypted data breaches don't trigger FTC's 30-day notification requirement for tax firms, but unencrypted customer info from 500+ consumers does—clarifying a common compliance misconception.