EU to propose cybersecurity rules

Posted by   Virus Bulletin on   Feb 6, 2013

Companies required to report breaches.

The European Union is due to set out a new set of cybersecurity rules tomorrow - in which companies including search engines, energy providers, banks and financial service providers and 'internet enablers' will be required to report any breaches or cybersecurity incidents to national bodies.

The proposals drafted by the European Commission would affect around 40,000 companies including 'internet enablers" such as Google, Facebook, Twitter, eBay and Skype, obligating them to notify national authorities of any instances in which their services are disrupted or data privacy is breached - besides cybersecurity attacks, this also includes cases of human error and natural disasters. Sanctions would be determined and enforced by the individual member states.

The proposals have been drafted in an attempt to force the hand of the various parties involved since voluntary information sharing and regulation has not so far been successful. The document states: "The current situation in the EU, reflecting the purely voluntary approach followed so far, does not provide sufficient protection against network and information security incidents and risks across the EU."

Ahead of the formal announcement of the rules, the strategy has already received criticism from various industry leaders, whose concern is that enforcing such reporting mandates could harm business - and European digital rights group EDRi claims that such a move could give national authorities access to a level of information that would be in breach of the European Convention on Human Rights.

Following the official announcement of the rules, the proposal will be reviewed by the European Parliament and the leaders of the EU's 27 national governments before (if approved) becoming law.

Posted on 06 February 2013 by Helen Martin

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

First 11 partners of VB2019 announced

We are excited to announce the first 11 companies to partner with VB2019, whose support will help ensure a great event.

VB2018 paper: Fake News, Inc.

A former reporter by profession, Andrew Brandt's curiosity was piqued when he came across what appeared at first glance to be the website of a small-town newspaper based in Illinois, but under scrutiny, things didn’t add up. At VB2018 he presented a…

Paper: Alternative communication channel over NTP

In a new paper published today, independent researcher Nikolaos Tsapakis writes about the possibilities of malware using NTP as a covert communication channel and how to stop this.

VB2019 conference programme announced

VB is excited to reveal the details of an interesting and diverse programme for VB2019, the 29th Virus Bulletin International Conference, which takes place 2-4 October in London, UK.

VB2018 paper: Under the hood - the automotive challenge

Car hacking has become a hot subject in recent years, and at VB2018 in Montreal, Argus Cyber Security's Inbar Raz presented a paper that provides an introduction to the subject, looking at the complex problem, examples of car hacks, and the…

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.