News Item

Reporting data breaches - public consultation by the EU Commission

The European Commission has launched a public consultation on the procedures and formats for personal data breach notifications under the ePrivacy Directive. (2002/58/EC). This is an important development to increase the level of data security for citizens in Europe. The Agency’s role has been to develop guidelines for the technical implementation measures.

Published on July 21, 2011

Public consultation

The European Commission has launched a public consultation on the circumstances, procedures and formats for personal data breach notifications under the ePrivacy Directive. The introduction of a European Data Breach Notification requirement for the electronic communication sector, for example Internet Service Providers was introduced in the review of the ePrivacy Directive (2002/58/EC), ‘Article 4’.

Higher data security for citizens

This is an important development to increase the level of data security for citizens in Europe. Citizens will now be better assured of how their personal data is being secured and protected by electronic communication sector operators. Such assurances are crucial for trust in the digital economy. At the same time, the Internet Service Providers are now invited to give their input as to ensure that the measures are suitable and adequate at practical, implementation levels.

Timeline

The consultation is open to all interested stakeholders and contributions are welcome until 9 September 2011.

Agency role

The Agency’s role has been to develop guidelines for the technical implementation measures. Furthermore, if the Commission proposes technical implementing measures, it will have to consult the European Network and Information Security Agency (ENISA), the Article 29 Data Protection Working Party and the European Data Protection Supervisor (EDPS), as well as communications regulators in the Member States.

Background:

 EU Commission Press release

Consultation document

Earlier references to ENISA work on Data Breaches Notification;

Workshop, Jan., 2011

Data Breach Notification Report, Jan., 2011

Seminar, Oct., 2010.

Stay updated - subscribe to RSS feeds of both ENISA news items & press releases!

News items;

http://www.enisa.europa.eu/media/news-items/news-wires/RSS

PRs:

http://www.enisa.europa.eu/media/press-releases/press-releases/RSS

This site uses cookies to offer you a better browsing experience.
Aside from essential cookies we also use tracking cookies for analytics.
Find out more on how we use cookies.

Accept all cookies Accept only essential cookies