NCSC will no longer flag security breaches to data regulator

guest · Apr 25, 2019

NCSC will no longer flag security breaches to data regulator
UK cyber agency wants companies to seek security advice without the fear of fines
April 25, 2019
https://www.itpro.co.uk/information...nger-flag-security-breaches-to-data-regulator

The cyber security agency's chief executive Ciaran Martin said that the framework would help both the NCSC and the Information Commissioner's Office best serve the UK during data breaches, while at the same time respect each other's remits and responsibilities to business.

The agreement, which has been agreed upon by the ICO, means that companies that are subject to data breaches will be offered confidentiality, specifically from the ICO, should they seek advice from the NCSC.
"While it's right that we work closely together, the NCSC will never pass specific information to a regulator without first seeking the consent of the victim."

What's more, despite encouragement from the NCSC to report a breach, the agreement could provide further protections to those companies seeking to avoid large fines from an ICO investigation - fines which would only surface if the company has been negligent with the processing of user data.
Therefore there's a risk that by trying to encourage companies to come forward confidentially the NCSC could find itself impeding the work of the ICO.
Click to expand...

Log in or Sign up

NCSC will no longer flag security breaches to data regulator

guest Guest

Log in or Sign up

NCSC will no longer flag security breaches to data regulator

guest Guest

Useful Searches