European lawmakers are expected to approve a telecommunications bill Wednesday, which imposes the Continent's first data-breach notification requirement on telecommunications operators and Internet service providers.
If you touch any data about anyone in the EU, you're on the hook for a slew of increased obligations, from a stricter definition of consent to new laws on profiling, data handling, data retention, data processing, breach notification requirements, and more.
Britain, Germany and France all have different forms of mandatory data breach notification laws that require individuals affected by data breaches to be informed.
But he added that there is "every prospect" that data breach notification will become a legal requirement for organisations, both for notifying individuals affected by such breaches and informing the ICO.
State data breach notification laws are a notoriously complex regulatory morass, with each state imposing different requirements about the types of data that trigger the notice requirements and the precise form of notification that is required.
Encryption: California led the data breach notification law effort by passing, in 2002, a law requiring businesses and government agencies to notify California residents of data security breaches.
This article argues that Australia's recently-passed data breach notification legislation, the Privacy Amendment (Notifiable Data Breaches) Act 2017 (Cth), and its coming into force in 2018, makes an internationally important, yet imperfect, contribution to data breach notification law.
Firstly, some context to data breach notification provisions is offered, which are designed to address some of the problems data breaches cause for data privacy and information security.
