On March 27, the U.S. Senate introduced the Senate Cybersecurity Protection Act, which aims to authorize and fund the sergeant at arms to offer services to prevent, detect and recover from cyberattacks on a senator’s or staff member’s personal devices and accounts.
While the services are voluntary, the approach follows a growing trend in the private sector to safeguard sensitive data as more employees work from their personal devices.
The bill, which was written by Sens. Ron Wyden, D-Oregon, and Tom Cotton, R-Arkansas, also includes a measure requiring an annual report regarding cybersecurity and surveillance threats to the legislative branch.
The proposed law acknowledges that high-ranking government employees don’t always use their government-issued devices and accounts for work, a practice that isn’t unlawful, but does pose risks.
“If they are also using personal email accounts, you are only as safe as your weakest link,” said Frost Brown Todd privacy and data security law attorney Michael Nitardy. He added, “What people are afraid of is, if…