ICO Says Revised Law Still Years Away
PRIVACY LAW—UK & EUApril 21, 2011
New EU data protection laws will likely mandate data breach notifications for all organizations, said UK Deputy Information Commissioner David Smith. However, Smith said at a London event this week, the new laws are likely still years away. The Data Protection Directive is currently under review by the European Commission, V3.co.uk reports. An initial set of proposals is expected this summer. Service providers will be required to report breaches in May, but that will likely extend to all organizations eventually. Other changes may include the "right to be forgotten," built-in privacy protections and requirements for minimal data collection, Smith said.