New Zealand's privacy commissioner is calling for mandatory data breach notifications--and for the concealment of data breaches to be a crime--reports Stuff.co.nz. But the national organisation representing New Zealand businesses says such penalties would be unjustified. As the Law Commission reviews the Privacy Act, Commissioner Marie Shroff--who implemented voluntary breach notification guidelines in 2008--says, "You need to have a sanction there if the scheme is going to be effective. You may never have to use that sanction." But Business New Zealand's chief executive says that it's "disturbing" that the commissioner has leapt from voluntary notification guidelines to criminal sanctions, calling it a "very heavy-duty thing to do."
Full Story