http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/1...
>Poor information security isn't a crime.
The Data Protection Act does not in practice criminalise poor information security – it does criminalise the lack of things like a risk assessment. Short of actual negligence, nobody will be prosecuted due to the hostile actions of a third party. Probably not a bad thing, as it would be obviously ludicrous to do so.
TalkTalk did not take appropriate measures against unauthorised processing.
Actually, it can be, for example if it results in data protection violations[1]. However, UK law is slightly unusual in this respect, in that while there are technically criminal offences involved, at present the main ones can't lead to arrest or jail time, only monetary fines. A couple of years ago there was talk of consulting on changing this, though I'm not sure what the situation is following the recent general election.
[1] https://www.cps.gov.uk/legal/d_to_g/data_protection/#offence...
No, it's not.
The bill will say that "unbreakable" encryption is illegal - which means all encryption, as if it's breakable, well, it's not really encrypted, is it.
Source please – I've not seen this language indicated anywhere.
they haven't arrested anyone at talktalk, who are tge ones who had such poor infosec that script kiddies could blow them wide open. Instead they're arresting children.
Poor information security isn't a crime. Breaking into computer systems is.