Europe - obligation to notify security breaches

New Legal Requirements for the Electronic Communications Sector: Security Breach

Notification, Content Filtering and Data Retention22 October 2008, Brussels, Belgium
New requirements for operators and service providers will be introduced by the review of the EU telecommunications regulatory framework. Companies suffering a security failure will be required to notify affected individuals as well as supervisory authorities. One of the issues debated is whether the application scope of the notification obligation will be extended at the national level, to include also banks, insurance companies, hotels, universities, etc. Another requirement under discussion is content filtering. The electronic communications sector is also facing the implementation of the new European rules about traffic and location data retention for law enforcement purposes.