A previous HN discussion, possibly on Equifax now that I think about it, had a comment recommending the book "The Chickenshit Club", about why the justice department doesn't prosecute.
I just finished in it a discussion of Enron and their auditors, Arthur Andersen. The justice department prosecuted Andersen (one of the "big 5" accounting firms at the time), and there was a lot of backlash about the Justice Dept "killing Andersen".
The details of it are that Enron was way crooked, lying to investors and the public saying everything was great, when it wasn't. Andersen audits didn't reveal this, and also was responsible for increasing document shredding from 80lbs/day to >2,000lbs/day in the few days before the SEC subpoena. And this was after Andersen had been shown to be negligent in the auditing of Worldcom, QWest, and Globalcom.
Basically, they recommended fraudulent practices with WorldCom, got caught and said "We promise we will never do that again" and did it again with Enron.
Justice Dept prosecuted, and then there was all this backlash about the prosecution.
So, is prosecution of Equifax likely? Seems like we as a country have trained the government not to.
Second the recommendation for Chickenshit Club (also helps interpret the speed and proceedings of other DOJ cases in play).
Equifax is largely embedded in our business/credit infrastructure and there would be collateral consequences for all of the businesses who would have to change as a result of their punishment/demise. This in no way absolves them from responsibility but DOJ pragmatism towards corporations is they way it goes, for now.
If AWS (for example) experienced some significant breach, would the DOJ and/or the public want them punished out of existence? Execs go to jail vs. large corporate fine? Should punitive damages go towards patching the breach or refunding customers? It's a delicate balance and I'm personally undecided on how to scope the fix, even after reading Chickenshit Club.
The bigger danger here just sounds like size in general.
If AWS maliciously screwed people over in a blatant way and was only 3% of the market, there's a lot less incentive to let them keep on keeping on than if they're 50% of the market.
I think a lot of ills of the current system could be avoided if you had tax penalties or such that scaled aggressively with company size and revenue. Intentionally give up some economies of scale in exchange for flexibility, competitive pressures, and resiliency.
Fine that represents the actual societal harm. If they can't pay it, shut down - fine cannot be discharged in bankruptcy.
If the services in question are so essential that the government doesn't want it to shut down, then the government should take it over like they did with Freddie and Fannie
I think you are overestimating their importance. The credit agencies have already pretty much proven to us that they can't accurately rate risk when their fees are on the line.
1775 USA: If we don't like the king, we shouldn't get rid of the monarchy - think of the impacts to the wider society!
2018 USA: If we don't like the executive, we shouldn't get rid of foocorp - think of the impacts to the wider society!
systemic/structural answers to specific problems are rarely the solution, but they sure do help you avoid the cost of dealing with the specific problem..
I think you need to source that backlash. I find it highly likely certain people/groups used their media contacts to push that narrative, but I don't know a single actual person besides some Wall Street types who disagreed with the Andersen prosecution... then to extraplote that to "country have trained the government not to." I think is a mistake.
The DOJ problems are not from the public.. they are lack of internal willpower, among other things. They should be doing their job regardless.
If the people permit the government to be run by corporations, and the corporations rebel against the Andersen decision, who is the source of the backlash?
Well, if Congress and the Administration ever were to really flip (2018, etc...)
It would be wildly unpopular amongst legal scholars, and would itself somewhat threaten the republic.
Nonetheless, as a first order of business, I'd recommend retro-actively eliminating some of the statutes of limitation covering our last few crises.
Then, investigating with full transparency and hanging them out to dry.
And if, really, we can't lift those statutes of limitation, nonetheless forcing such full transparency through aggressive investigation -- and writing laws to support same and hanging those who obstruct in any way, out to dry.
I'm not for micro-managing society through legal action. But, we've selectively enforced basic laws, creating different classes based upon effective legal exposure and risk.
Fundamentally, we've stopped -- to the extent we ever were -- being a society and governance of laws.
I'm more concerned about other economic and power matters, but right now the U.S. is all het up over "immigration". The missing piece in the whole conversation, or particularly "legal enforcement"? Demand. For decades, effectively nothing has been done to those employers who engage in illegal employment.
Which include, by the way, Herr Trump, using and apparently abusing undocumented workers e.g. in his NY construction affairs.
This country, the U.S., is getting to the point of needing a South African type intervention. A truth commission. Because while parts of society feel whole and privileged, it's come with devastating consequences for those who are, after all, supposed to be their fellow citizens.
Just like Puerto Ricans are.
And since we're nowhere near flushing the chickenshits out of government, we have to do the investigation and truth-telling ourselves. And try to bullwark the last bastions for same: The free press and a free Internet.
"US senators" here referring to most of the minority party, and none of the majority party, meaning nothing is likely to come of this until after 2018.
The letter, which was dated Feb. 7, was led by Hawaii's Democratic Senator Brian Schatz and signed by 29 Democrats, including all those on the Senate Banking Committee, and two independents. per Reuters, but no actual letter text.
There's an argument to be made that the Democrats (who I'm a stalwart supporter of) have happily polarized this issue, rather than doing something more quiet while collecting bipartisan support. That what they're doing looks helpful but really isn't.
Well, yeah. In the 90's or early 00's, it would have been both parties with a joint press conference. Now we have 24 hour news and don't need cooperation to get press. At this point working with the other party is just not done. The congressional leadership of both parties has set a course and its going to be this way for a while. In some ways, its just a shift from incumbent protection to trying to gain back seats. Equifax is pretty far down the list politically anyway, so it probably didn't actually do any harm, but it certainly didn't do any good either.
I find it amusing that the polling that has failed for multiple years is being seen as valid this time around.
Was it inevitable that the Equifax situation became partisan?
I'm a market constructivist, and I'd prefer the simplest possible solution which regulates Equifax and its immense externalities out of existence.
But isn't there also a libertarian case to be made that the credit authorities are a cartel and should be deregulated out of existence? And if that's the case, can't at least some of us find common ground?
No, the Equifax breach hurt tons of constituents on both sides of the aisle. The parties had every reason to come together on this. Especially the Republicans, because the lack of trust will be bad for business. But it seems the ones elected at the moment are beholden to specific donors and not accountable to the people they're supposed to represent.
I'm not clear on how deregulation would hurt Equifax and the other reporting agencies? It seems that enforcing regulations would hurt them in this case.
I realize this isn't immediately realistic, but please brainstorm with me:
1. Change privacy laws so that consumers own their own data. (Something like Germany's BDSG?)
2. Repeal the Fair Credit Reporting Act.
The idea is that once consumers have the weapons and wherewithal to sue irresponsible credit rating authorities out of existence, perhaps fewer "regulations" will be needed.
Equifax already has 23 class-action lawsuits pending. But it would be better for consumers if a breach of this type were a crime investigated by the government, so individuals don't have to proactively go to court themselves.
By default, incumbents and big players have the advantage in the market, so without regulation I doubt anyone could unseat the Big Three agencies. They can afford to have a some inaccuracies and even a breach here and there and still be hard to beat. Remember the people whose data they lost are not their customers. Using the government to force companies to protect that data could level the playing field and increase competition.
> Was it inevitable that the Equifax situation became partisan?
I'm not so sure it's the Equifax situation here, but rather the CFPB that's the target of partisan lashings. The CFPB has been criticized by both the left and right at various times for overspending, lack of oversight, lack of results, and especially it's fundamental structure - in fact it was even ruled unconstitutional by a DC circuit court. The ruling has since been upheld in an en-banc hearing.
Some of the comments from the judge in the initial ruling are rather surprising:
"The Director enjoys significantly more unilateral power than any single member of any other independent agency. By “unilateral power,” we mean power that is not checked by the President or by other colleagues. Indeed, other than the President, the Director of the CFPB is the single most powerful official in the entire United States Government, at least when measured in terms of unilateral power."
Someone needs to pull rank and take over or start an investigation outside of the CFPB. They clearly aren’t doing their job, and now it has become stupid to simply ask them to start doing it.
People just need to realize the corruption is bipartisan. This tribalism bullshit is going to eat us from the inside out.
I swore an oath to the constitution, not to a fucking party, so stop trying to tell me your tribe is better, it isn't, and fuck off with the bullshit claims of "but false equivalence"!
The people downvoting you just don't that like you flipped the exact statement of the gp. You are both right.
The libertarians I know would probably say that it's the government's fault that this situation arose. I don't think they would have an answer how to deal with the current situation.
If they think it's the government's fault, that's not necessarily a barrier to agreement on a course of action. If there's a law that can pass that libertarians can call "deregulation" I could potentially get behind it so long as it has the desired effect.
For instance, it's my understanding that laws exist which protect the big three credit authorities. What are those laws, and what the prospects for changing them?
I love the answer of letting them die. The negative externalities of the big three CRAs exceed value they provide and if the market could respond to those externalities, they would go under.
However, would whatever replaces the big three exhibit the same negative externalities and recreate the same situation of market failure?
I think the more apt comparison to letting people die if they can afford healthcare is for Equifax to make all their data public, and you can pay Equifax a couple thousand a month to make data about you private.
Meh, I misunderstood who "let them die" refer to -- I thought it was the CRAs, not people. :\
I still feel like your analogy doesn't adequately capture the negative externality in the identity theft that the CRAs enable. In a healthy marketplace, the cost of that identity theft would be borne by the people who profit from it, not innocent third parties.
How do we get to a marketplace where that crushing cost falls upon the deserving party, dissuading them from their destructive course? We need to acknowledge that the quantitative change in the accessibility of personal credit information amounts to a qualitative change, justifying a rethink about who owns it.
Equifax is bad, but the CFPB is much worse. Its rules and actions are immune to oversight by any other body, including Congress and the Judiciary. It draws funding directly from the Federal Reserve instead of being funded by Congress.
I just finished in it a discussion of Enron and their auditors, Arthur Andersen. The justice department prosecuted Andersen (one of the "big 5" accounting firms at the time), and there was a lot of backlash about the Justice Dept "killing Andersen".
The details of it are that Enron was way crooked, lying to investors and the public saying everything was great, when it wasn't. Andersen audits didn't reveal this, and also was responsible for increasing document shredding from 80lbs/day to >2,000lbs/day in the few days before the SEC subpoena. And this was after Andersen had been shown to be negligent in the auditing of Worldcom, QWest, and Globalcom.
Basically, they recommended fraudulent practices with WorldCom, got caught and said "We promise we will never do that again" and did it again with Enron.
Justice Dept prosecuted, and then there was all this backlash about the prosecution.
So, is prosecution of Equifax likely? Seems like we as a country have trained the government not to.