Mark Warner actually said...

"How do you get the standard right on when it becomes the duty of the company or the financial institution to report an incursion?"

"I think that the question of enforcement has got to be an area that we focus on."

"I think this is a real problem that the FTC's enforcement authority in this area is so limited."

"Do we need to do this in--I believe we need to do this in collaboration with industry, setting a regulatory process that would be static in an area that moves this quickly."