Dutch govt consults on data breach reporting obligation
|
|
Published: Thursday 22 december 2011 |
The Dutch ministry of security and justice has put together a bill on the obligation to report data breaches. The Data Protection Act (WbP) is to be adjusted and thetext open to consultation up to 29 February. The WbP will be extended with a generally worded obligation to report loss or theft of data (Article 34a). In case of breach, the database administrator must make a risk estimate. If the case is serious enough, the administrator must inform privacy watchdog CBP and all parties concerned. The Telecommunications Act will have a reporting obligation (Article 11.3a) specifically aimed at telecommunications service providers. The supervision of both amendments will be handled by the CBP.





