Share

Related Stories

  • Complex Information Security Compliance for Multinational
    Multinational companies in North America face a raft of red tape in terms of compliance and regulatory issues, as well as the uphill task of dealing with the complexities of international IT systems and resources. Steve Mansfield-Devine asks how companies can stay within the regulatory confines of relevant information security legislation without compromising profitability
  • Comment: Information management policies must address risk of human error
    Christian Toon, head of Information Security at Iron Mountain Europe, considers the growing number of avoidable data breaches that involve paper documents and advises businesses how to minimize these risks by getting to grips with information handling, management, storage and secure destruction.
  • Compliance Strategies – A.K.A. Alphabet Soup
    Does your organization follow a recipe, or simply ‘eye-up’ the ingredients to your compliance tick boxes? Fred Donovan taste-tests what is often viewed as the unsavory side of the information security profession
    Members' Content
  • What Is Critical to Your Infrastructure?
    Critical infrastructure means many things to many people. Adrian Davis, principal research analyst with the Information Security Forum (ISF), explains why determining which infrastructure elements are critical to a business is the first step in keeping them safe
  • Comment: Cracking the Counterfeit Fraud Challenge
    While banking fraud might be at its lowest level ever in the UK, now is not the time for complacency. Emil Büchler, head of cards at SIX Card Solutions, explains that while advances are being made to stop the card counterfeiters, work remains to be done.

Top 5 Stories

News

US and Europe agree data protection principles

05 January 2009

The US and Europe have agreed on a set of high-level principles designed to protect personal data gathered during law enforcement procedures.

The agreement, reached during a U.S.-EU Justice and Home Affairs Ministerial meeting in Washington, formalised recommendations made in May, as a result of talks between the two regions.

Measures agreed included the prevention of undue impact on third party countries. The EU and US would endeavour to prevent putting undue pressure on third party countries during investigations due to differences in their data privacy stances, said the recommendations. They also called for avoiding adverse impact on private entities as a result of data transfers. Specific data sharing agreements designed to protect the privacy of individuals will also be necessary when US and EU laws conflict.

The US and the EU still need to work together on a common approach to dealing with complaints about privacy breaches, according to a blog post on the Department of Homeland Security-sponsored Homeland Security Leadership Journal. They must also collaborate on reciprocity, ensuring that one region doesn't impose different data protection standards on its partner than it does on itself.

This article is featured in:
Compliance and Policy  • Data Loss  • Public Sector

 

Comment on this article

You must be registered and logged in to leave a comment about this article.