"Washington Meetings Program and the Digital and Cyberspace Policy Program: A Conversation with Giovanni Buttarelli", Council on Foreign Relations, Washington DC
The July 2014 edition of the EDPS Newsletter covers EDPS Opinions on asset freezing and Big Data and many other EDPS activities.
In October 2013, the EDPS was notified of a data security breach involving unauthorised access to an EU Agency database which is operated by an external contractor. This database contained the names and email addresses of approximately 70 individuals. The Agency asked the EDPS for advice on how best to handle this breach, and has now implemented all our suggested remedial measures. These included carrying out a full investigation with the contractor, implementing amendments to the contract, and notifying affected data subjects.
Some EU institutions may already have their own rules in place about reporting security breaches to the relevant internal departments. Whilst we welcome this type of proactive approach, we are presently unable to provide a direct or definitive instruction on any obligations to notify security breaches to the controller or the EDPS, under current data protection law. However, the contractual changes that the Agency has implemented in this particular case indicate a positive and practical approach to data breach management, by obligating contractors to promptly notify any such breaches to the controller. This will enable the Agency to deal with any future incident in a timely and effective manner.
Stellungnahme zur Gemeinsamen Mitteilung der Kommission und der Hohen Vertreterin der Europäischen Union für Außen- und Sicherheitspolitik zur „Cybersicherheitsstrategie der Europäischen Union“ - ein offener, sicherer und geschützter Cyberraum und zum Vorschlag der Kommission für eine Richtlinie über Maßnahmen zur Gewährleistung einer hohen gemeinsamen Netz- und Informationssicherheit in der Union
Proposal for a Directive of the European Parliament and of the Council concerning measures to ensure a high common level of network and information security across the Union
Joint Communication to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions. Cybersecurity Strategy of the European Union: An Open, Safe and Secure Cyberspace
EDPS comments on DG Connect's public consultation on improving network and information security (NIS) in the EU