Re:Details of UK website visits 'to be stored for year'
by rikkus on Wednesday November 04, 2015 @05:56AM
(#10505713)
Poor information security is a crime when that information involves personal information. The Data Protection Act requires that personal information is kept secure. Just because no one has been prosecuted yet doesn't mean they couldn't or shouldn't be.
[ Parent
| on HN ]
Re:Details of UK website visits 'to be stored for year'
by matthewmacleod on Wednesday November 04, 2015 @06:03AM
(#10505732)
UK law basically says "assess the risk and take appropriate measures." Short of criminal negligence, it's extremely unlikely that anybody will be prosecuted.
Re:Details of UK website visits 'to be stored for year'
by ptaipale on Wednesday November 04, 2015 @07:21AM
(#10505988)
The Talktalk data leak actually seems like criminal negligence. I don't know the British law, but that level of negligence at least should be criminal.
Re:Details of UK website visits 'to be stored for year'
by rikkus on Wednesday November 04, 2015 @05:47PM
(#10510370)
"Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data."
TalkTalk did not take appropriate measures against unauthorised processing.