4 ms·
Does the UK actually have a mandated deadline for any kind of infosec disclosure?
by akerl_ 1y ago
Does the UK actually have a mandated deadline for any kind of infosec disclosure?
- arethuza 1y agoIf the breach contains personal data then you are supposed to report it within 72 hours: https://ico.org.uk/for-organisations/report-a-breach/personal-data-breach/personal-data-breaches-a-guide/ https://ico.org.uk/for-organisations/report-a-breach/persona...
- eterm 1y agoWe were still in the EU when GDPR came along, and we haven't repealed our implementation of it, the Data Protection Act ( 2018 ), which has mandated disclosure in line with GDPR. Even pre-GDPR we had much stronger data protection than most countries with the Data Protection Act ( 1998 ), although I don't remember that having disclosure rules, it did have a lot of things that companies only freaked out about post GDPR and the weight of the EU behind severe penalties.