Data breaches: If a company has lost your personal info, they now have to tell you

Krusty · Feb 21, 2018

Uber, Ashley Madison, Equifax: these brands are known for ride hailing, infidelity and credit scores respectively, but also for the exposure of customer information.

As of today, many businesses that operate in Australia are subject to the country's new notifiable data breaches scheme.

Lose a hard drive? Give an unauthorised person patient files? In certain circumstances, companies will have to tell the Office of the Australian Information Commissioner (OAIC) and any individual affected if personal data are lost, stolen or leaked.

If you use any services that collect details about you — from your birth date to your shoe size — here is what you need to know.
Click to expand...

http://www.abc.net.au/news/science/...ust-inform-consumers-of-data-breaches/9462170

guest · May 13, 2019

Lessons learned during first 12 months of Notifiable Data Breaches scheme
May 13, 2019
https://www.oaic.gov.au/media-and-s...-12-months-of-notifiable-data-breaches-scheme

Data breaches involving personal information may be prevented through effective training and enhanced systems, analysis of the first 12 months of mandatory notifications reveals.

Releasing the Notifiable Data Breaches 12-month Insights Report at the start of Privacy Awareness Week in Sydney today, Australian Information Commissioner and Privacy Commissioner Angelene Falk called on regulated entities to heed its lessons.
“The requirement to notify individuals of eligible data breaches goes to the core of what should underpin good privacy practice for any entity — transparency and accountability.

“Our priority has been to ensure the breach was contained and rectified, affected individuals were informed so they could act swiftly, and that measures were put in place to prevent a reoccurrence.
Click to expand...

guest · May 21, 2019

Companies send confusing alerts about data breaches
May 19, 2019
https://www.futurity.org/data-breaches-notifications-2066072/

Building on their previous research that showed consumers often take little action when facing security breaches, researchers analyzed the data breach notifications companies sent to consumers to see if the communications might be responsible for some of the inaction.

They found that 97 percent of the 161 sampled notifications were difficult or fairly difficult to read based on readability metrics, and that the language used in them may have contributed to confusion about whether the recipient of the communication was at risk and should take action.
“Our analysis shows that requiring companies by law to send data breach notifications alone is not sufficient,” says Yixin Zou, a doctoral student at the University of Michigan.

“For most companies, those notifications are only seen as a requirement for complying with data breach notification laws rather than a way to educate and protect their customers. We need to rethink and rework consumer protection laws such as these to ensure that companies’ notifications are actually helpful to consumers,” Schaub says.
Click to expand...

Log in or Sign up

Data breaches: If a company has lost your personal info, they now have to tell you

Krusty Registered Member

guest Guest

guest Guest

Log in or Sign up

Data breaches: If a company has lost your personal info, they now have to tell you

Krusty Registered Member

guest Guest

guest Guest

Useful Searches