Still, criminal hackers gravitate to some hotels because, like retail stores and restaurants, hotels do many credit card transactions at a local level, where centralized and highly sophisticated data security safeguards may be lacking.
The Commissioner undertook a detailed investigation into the various data security safeguards to determine whether the security safeguards were strong enough given the sensitivity of the personal information being held by Equifax.
These requirements could include the encryption of data and other security safeguards.
Typically, data security systems comply with security safeguards by restricting access to the data or "sanitizing" it so that no single user in the dataset can be identified — a strategy that is actually vulnerable to attack, Johnson says.
It needs a strategy, one that explains exactly what the criteria for release of data are, sets out security safeguards that withstand challenge and introduces tough penalties for any breach that demonstrate a genuine respect for privacy.
Finally, a core level of data security will be required -- "safeguards to protect against unauthorized access" is the standard language used in these laws.
He said that although the site billed itself as "100% discreet" it did not do enough to protect personal data because well-known security safeguards were "insufficient or absent".
Prof Sharona Hoffman, co-director of the Case Western Reserve's Law-Medicine Center, proposed that the agreements would state how "the data will be used, who will see the data, and how it will be discarded after use as well as to commit to safeguarding data security and refraining from attempts to re-identify data".
And businesses can differentiate user roles for the right type of data access to account for security, safeguards and privacy.
This isn't a kind of Stasi state". In the letter, written by 21 of the UK's 41 PCCs, to the Home Secretary, the PCCs said: "We believe it is an integral part of the armoury necessary to ensure future safety of citizens and a necessary tool to protect, conditional on stringent safeguards on data security and civil liberties, and should be reviewed on a regular basis".
Administrative procedures, physical safeguards, technical data security services and technical security mechanisms.
