Alain Bensoussan
The European Commission has launched a consultation (read EU press release here) on the practical rules needed for the entry into force of the obligation requiring ISPs to inform relevant national authorities of any personal data breaches, introduced by the ePrivacy Directive 2009/136/EC of November 25, 2009.
The purpose of the consultation is to seek the views of telecoms operators, Internet service providers, Member States, national data protection authorities and consumer organizations on data breach notification (“DBN”).
Stakeholders have until next September 9 to provide their feedback and input on the issues involved.
The consultation could result in the proposal by the Commission of “technical implementing measures” to be reviewed by the EU Parliament.