For ADMA Chief Executive Jodie Sangster, the proposed mandatory data breach notification legislation may not be the answer. In a column for The Sydney Morning Herald, Sangster notes there is not “a clear definition of ‘serious harm’ in the legislation…(which) will likely cause organisations to adopt the most risk-averse internal policy setting.” As a consequence, there will be “over-reporting of relatively minor data errors” and “those with the most sophisticated data-management systems” will get penalised, while small- to medium-sized businesses will take a “hear no evil, see no evil” approach, she writes.
Full Story