Breach disclosure proposals are unworkable

So the European Commission’s Viviane Reding thinks that imposing an administrative burden will save costs (EC proposes overhaul of data protection legislation)? What planet was she speaking from?

While I have every sympathy for forced disclosure of data leaks – it’s a damn good idea – a 24-hour limit on disclosure simply won’t work. Imagine an employee leaves a disk in a taxi – how long before they work out that’s what happened? How long after that before they admit it, or, if it’s a copy, do they try to cover it up? If so, who’s guilty?

Tom Sweeney