Attorney-General Nicola Roxon has issued a discussion paper today on whether Australia should introduce a mandatory data breach regime.
Such laws would compel organisations to inform members of the public any time personal information about that customer falls into the wrong hands.
For Australian organisations today, the disclosure of such breaches is voluntary and subject to guidelines by the Federal Privacy Commissioner.
Roxon's discussion paper is the first step the Government has made towards a mandatory regime since the Australian Law Reform Commission recommended such a policy in 2008.
Roxon's discussion paper looks at how legislation might strengthen the protection of personal information as well as minimise damage when breaches occur.
The paper notes that there has been a 27 percent increase in data breaches reported to the Privacy Commissioner and mounting public concern over the impact of these breaches.
It notes that mandatory data breach notification schemes are in place or under consideration in the United States, the European Union, the United Kingdom and Ireland.
The case for more regulation is found on giving the public a legal basis for “resecuring” their information following a data breach.
Such laws could act to improve data security, especially among companies where adverse publicity could have consequences for their share prices.
It would also provide better information to government and the public on the scope and frequency of data breaches, the paper argues.
Finally it suggests mandatory data breach notification may bolster public confidence that the Government is taking individual privacy rights seriously.
The main issues
The paper canvasses questions such as
With half an eye on the issues involved in the Government’s current data retention proposals, the paper also raises the question of whether there should be an exemption for law enforcement activities.
In some cases, notification of a data breach by an agency could compromise its law enforcement activities, the paper states.
Submissions on the issues raised in this paper are sought by 23 November 2012.
How do you feel about mandatory data breach notification laws? Have your say below...
Copyright © iTnews.com.au . All rights reserved.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED GOES EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @itnews.com.au to your white-listed senders.