Shostack + Friends Blog Archive

 

European View on Breaches

I hadn’t seen this article by Peter Hustinix when it came out, but it’s important. He says that “All data breaches must be made public:” [link to http://resources.zdnet.co.uk/articles/comment/0,1000002985,39603777,00.htm no longer works]

The good news is that Europe’s lawmakers want to make it obligatory to disclose data breaches. The bad news is that the law will not apply to everyone. Those exemptions are in no-one’s interest, says European privacy tsar Peter Hustinx.

Hard to argue, unless you’re using vague platitudes.