An Out-Law.com report quotes the UK Information Commissioner's Office (ICO) as saying the European Commission should not suggest the draft General Data Protection Regulation will provide citizens with protection that "in reality, it cannot deliver." The ICO said while it recognises the "desirability of extending the territorial scope of EU regulation...in practice, there may be little that European supervisory authorities and others can do in terms of enforcement unless effective cross-border enforcement mechanisms can be provided." Among other comments, the ICO also said it would be "unrealistic" to have companies report all data breaches within a 24-hour period.
Full Story