The European Commission has proposed widespread changes to data protection rules governing Europe, including the addition of significant fines for breaching the laws.
The EC wants to replace the current directive, issued in 1995 when the internet had little traction across Europe, with legislation that applies to all member states.
As part of its changes, companies who breach the rules could be told to pay out as much as 1 million (831,000).
I would have thought all the data protection regulators are going to be made up it's like Christmas for them.
The EC has proposed both a regulation, setting out "a general EU framework for data protection" and a directive which sets out rules on the protection "of personal data processed for the purposes of prevention, detection, investigation or prosecution of criminal offences and related judicial activities."
Despite concerns, the EC believes that stricter rules will hinder economic growth across Europe, businesses will actually be saved around 2.3 billion a year thanks to the streamlined processes being proposed.
In particular, the regulation will get rid of separate laws governing different nations, thereby easing administrative burdens, the EC said.
"With this reform the European Union will create a real single digital market, accessible both for companies and consumers. It will make the European Union an international standard setter in terms of modern data protection rules," said EU justice commissioner Viviane Reding, the EC's vice president.
"[Businesses are] confronted with a real load of notification requirements a patchwork of laws, a load of reporting requirements this leads to legal uncertainty, to legal fragmentation.
"Reform will eliminate the unnecessary administrative burden as well as the many costs linked to different reporting requirements existing throughout the EU. It will do so with one main text. "
According to Reding, 72 per cent of EU citizens are concerned businesses will misuse their data.
The legislation will take effect two years after it is officially adopted.
24-hour rule
One of the more controversial aspects of the regulation is its request that companies inform both affected parties and data protection authorities when a breach occurs within 24 hours.
-
Should AI PCs be part of your next hardware refresh?AI PCs are fast becoming a business staple and a surefire way to future-proof your business
-
Westcon-Comstor and Vectra AI launch brace of new channel initiativesNews Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuseNews The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victimsNews Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlashNews UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
-
UK's data protection watchdog deepens cooperation with National Crime AgencyNews The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
-
ICO slams Electoral Commission over security failuresNews The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firmsNews Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
-
ICO reprimands Coventry school over repeated data protection failuresNews The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach
-
Forcing Apple to allow alternative app stores might cause major security risksAnalysis Apple will be forced to allow third-party marketplaces on its devices, but some experts have raised serious security concerns
