Graham Cluley writes:
The Turkish government is proposing a controversial new cybersecurity law that could make it a criminal act to report on data breaches.
The new legislation proposes penalties for various cybersecurity-related offences. But the key one which has people concerned is this:
“Those who carry out activities aimed at targeting institutions or individuals by creating the perception that there has been a data breach in cyberspace, even though there has been no data breach, shall be sentenced to imprisonment for a term of two to five years.”
The problem is, of course, that such a law may discourage the reporting of any potential data leaks.
Read more at Fortra.