With the increasing amount of personal data available and the obvious risks associated with data breaches for citizens victims of data breaches.
Gaining and maintaining the trust from citizens that their data is secure and protected, it is difficult.
A new set of Governance rules when it comes to the World Wide Web, is required.
Following recent high profile incidents of personal data loss across Europe that have prompted discussion, the implementation of data breaches requirement, set up by Article 4 of the reviewed ePrivacy Directive which states:
” Directive 97/66/EC of the European Parliament and of the Council of 15 December 1997 concerning the processing of personal data and the protection of privacy in the telecommunications sector(5) translated the principles set out in Directive 95/46/EC into specific rules for the telecommunications sector. Directive 97/66/EC has to be adapted to developments in the markets and technologies for electronic communications services in order to provide an equal level of protection of personal data and privacy for users of publicly available electronic communications services, regardless of the technologies used. That Directive should therefore be repealed and replaced by this Directive “
Several Factors have been taken into account when it come to Data Breach notifications:
@ Best practices for preventing, managing and mitigating data breaches incidents;
@ Data breach notification management;
@ Views of Data Protection Authorities and industry on the notification of data breaches to the citizens affected;
@ Benefits from a pan-European approach for any of the above areas.
One can but wonder if the current approach to data breaches notifications is effective enough to protect citizens.
