Australia’s Attorney-General, Nicola Roxon, yesterday introduced a Discussion Paper on Privacy Breach Notification (PDF). The release of the paper almost certainly caused cheers in the vendor community, as The Reg is aware of at least one multinational software company that has made breach notification laws the centrepiece of …
Where's the conundrum?
"Should breaches be reported?"
Yes. Maybe not to the general public, but certainly to the relevant authorities, same as when bank's vaults are breached.
"When should breaches be reported?"
"What constitute a breach?"
The Australian Government has a list of items it considers vital for identifying a person (or vice-versa, for a person to identify themselves to an authority). These include, but are not limited to; name, date of birth, gender, residential address, passport number, driver's licence number, credit card details, etc...
Any breach in which two or more of these pieces of data could have been revealed need to be reported.
End of story. If companies are suddenly saddled with the care-and-upkeep of the data they collect under pain of a Federal indictment maybe they would then (a) take more care with the data they collect and (b) review whether or not they actually need to collect that data compared to the legal hassle of having to protect it.
She is completely out of her depth as AG. Mind you she would be out of her depth if she were a conveyancing paralegal I suspect.
This just her attempt to try and divert attention away from the complete fiasco she has created with the Ashby case.
Can we have an election please?
- Updated Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
- Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
- Windows 8.1, which you probably haven't upgraded to yet, ALREADY OBSOLETE
- Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
- Opportunity selfie: Martian winds have given the spunky ol' rover a spring cleaning