DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Data breach fines will not stop the rot

Posted on August 26, 2010 by Dissent

Over in the U.K., John E. Dunn discusses some hefty fines that have been levied following data breaches, but comments:

The public gets to hear about the punishment but a lot is left behind a curtain of secrecy. This is wrong and possibly dangerous.

What the UK lacks is not punishments but a basic data breach notification law that puts a legal (rather than informal) onus upon organisations of any type to report breaches not just to the FSA but to the Office of the Information Commissioner. Many US states already have such laws in place which is why most of the stories of serious breaches come from over the Atlantic.

One possibility is that this will happen via some form of amendment to the 1995 EU Data protection Directive. The UK, then, is waiting for the EU to set a European precedent, which is a wise approach i the long term, but could leave the UK exposed for some years to come.

Read more in his War on Error blog on TechWorld.


Related:

  • The day after XSS.is forum was seized, it struggles to come back online -- but is it really them?
  • Russia suspected of hacking Dutch prosecution service systems
  • Korea imposes 343 million won penalty on HAESUNG DS for data breach of 70,000 shareholders
  • Paying cyberattackers is wrong, right? Should Taos County's incident be an exception? (1)
  • IVF provider Genea notifies patients about the cyberattack earlier this year.
  • Key figure behind major Russian-speaking cybercrime forum targeted in Ukraine
Category: Breach LawsCommentaries and AnalysesNon-U.S.

Post navigation

← Confessions of an ATM Hacker
UK: Yorkshire Building Society takes action after customers’ details are stolen →

1 thought on “Data breach fines will not stop the rot”

  1. Steve Mellings says:
    August 31, 2010 at 5:04 am

    There is a change in Breach Notification Law due next May (2011) but it only covers a “Personal data breach suffered by publicly available electronic communications service providers”. I was at a seminar which covered this taken by an eminent DP Legal expert and his considered opinion was that this was the first step towards mandatory notification laws. However, the ICO was reticent to undertake this due to the perceived increase in work load. If this is their reason for not encouraging this law change they surely it shows how serious they are about stopping the institutional malaise towards data security!

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
  • Hacker group “Silent Crow” claims responsibility for cyberattack on Russia’s Aeroflot
  • AIIMS ORBO Portal Vulnerability Exposing Sensitive Organ Donor Data Discovered by Researcher
  • Two Data Breaches in Three Years: McKenzie Health
  • Scattered Spider is running a VMware ESXi hacking spree
  • BreachForums — the one that went offline in April — reappears with a new founder/owner
  • Fans React After NASCAR Confirms Ransomware Breach
  • Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack (1)
  • Infinite Services notifying employees and patients of limited ransomware attack
  • The safe place for women to talk wasn’t so safe: hackers leak 13,000 user photos and IDs from the Tea app

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Congress tries to outlaw AI that jacks up prices based on what it knows about you
  • Microsoft’s controversial Recall feature is now blocked by Brave and AdGuard
  • Trump Administration Issues AI Action Plan and Series of AI Executive Orders
  • Indonesia asked to reassess data privacy terms in new U.S. trade deal
  • Meta Denies Tracking Menstrual Data in Flo Health Privacy Trial
  • Wikipedia seeks to shield contributors from UK law targeting online anonymity
  • British government reportedlu set to back down on secret iCloud backdoor after US pressure

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.