European companies forced to own up to data losses

 

Gallery

By Barry Collins

Posted on 16 Sep 2008 at 10:00

European companies will be forced to tell customers if their personal data has been lost or stolen, as part of a new EC directive.

The data breach notification provision is part of the ePrivacy Directive that is currently being debated by the EU.

However, speaking to journalists in London, MEP Malcolm Harbour said he was confident that the data breach legislation will be approved.

"It will be mandatory for service providers to disclose to customers if their personal data has been breached," he claimed.

"The [European] Commission said that this will now become a requirement. The [European] Parliament took a rather dim view of this rather sketchy proposal. [But] the general view now is that it's a practical and workable proposal," he said.

The data breach provision would apply to any "public web service", according to Harbour, be that an internet service provider or online retailer.

It wouldn't include incidents such as the Government's infamous HMRC disc fiasco, however, which saw the personal details of 25 million child benefit claimants go astray.

The ePrivacy Directive is being introduced with a raft of new electronic communications legislation, that will see three-year "free" laptop deals quashed and mobile networks forced to transfer customers' phone numbers within a single working day.