Computerworld
Privacy Commissioner renews push for notification of data breaches
Attorney General to consider final report
Sandra Rossi  30 January, 2008 13:24

Australian Privacy Commissioner, Karen Curtis, today renewed her call for the compulsory notification of data security breaches by Australian organizations.

Frustrated by by continuing data breaches, Curtis said organizations need to be forced into securing data and their databases.

"While reporting would need to be proportional to the severity of the breach, it would provide organisations with a strong market incentive to adequately secure their databases," Curtis said.

"It would also give people an opportunity to take any necessary steps to protect their personal information."

Her call for mandatory reporting is made in a 786-page submission by the Office to the Australian Law Reform Commission (ALRC) in response to its Discussion Paper 72: "Review of Australian Privacy Law".

Other recommendations in the submission include creating codes for specific concerns that can be applied in addition to uniform privacy principles, in addition to minimising exemptions from the Privacy Act.

Curtis wants more stringent requirements for the health sector and credit reporting.

Another recommendation is the introduction of audits.

She said a qualified audit power would allow the Office to conduct privacy performance assessments of private sector organisations for compliance in certain circumstances.

A final report responding to the discussion paper will be sent to the Federal Attorney General in coming months for consideration.

Gartner's vice president of research, Rich Mogull, said legislative protection in Australia is critical.

Mogull said the introduction of disclosure laws in the US have been the biggest single driver in improving the IT security landscape.

He said 40 states in the US now have data breach disclosure laws.

Research shows that more than two-thirds of Australian organizations experience six losses of sensitive data each year.

A report from the IT Policy Compliance Group found these breaches reportedly include customer, financial, corporate employee and IT security data which is stolen, leaked or inappropriately destroyed.

Computerworld Buyer's Guide - Vendors Matched to this Article
More about Gartner, ACT

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Add to Google
Computerworld Buyer's Guide - Vendors Matched to this Article
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Computerworld Community Comments
Whitepaper

Reducing the risk of insider abuse

The potential for insider abuse can never be eliminated completely, but the steps outlined in this white paper can reduce the potential for such abuse. Read on to ensure no one person can alter your operations to their personal advantage or to the detriment of your organisation.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.