Data Protection Regulation

I've just sent in a Janet submission to the Ministry of Justice's Call for Evidence on the EU Data Protection proposals. Our response mentions the good and bad things about the proposal, as discussed here previously, for

6 June 2012 at 11:16am

Government CERTs and Information Sharing

CSIRT

I've had three discussions in two days about whether Government CERTs are different from others, which makes it a FAQ! It seems to me that legislation may be heading that way, and that that could create a potential problem for sharing information.

6 June 2012 at 11:14am

Data Protection Proposal: Federated Access Management

Access Management

The European Commission’s proposed Data Protection Regulation supports recent thinking in moving away from using consent as a basis for federated access management systems.

6 June 2012 at 11:14am

Data Protection Proposal: Privacy Breaches

Breach Notification

In dealing with breaches of privacy the Commission’s enthusiasm to protect and reassure Internet users seems to run the risk of having the opposite effect. Article 4(9) of the proposed Regulation defines 'personal data breach' means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;

6 June 2012 at 11:14am

Data Protection Proposal: Cloud Computing

Cloud computing

Cloud computing, whose whole point is to be independent of geography, does not fit comfortably into current data protection law. The Commission’s new proposal at least shows signs that clouds were a use case that was considered during drafting, so it is more obvious which provisions apply to them. These seem to offer a mixture of carrots and sticks to try to bring clouds within the European data protection regime.

6 June 2012 at 11:13am

Data Protection Proposal: Incident Response

The Commission's proposed Data Protection Regulation seems very positive for Incident Response. Indeed Recital 39 explicitly supports the work of Incident Response Teams:

25 June 2015 at 4:25pm

Europe's Data Protection Proposal