Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Monday, 20 March, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

Switch from fines to jail terms, privacy consultant says

by The Gurus
January 22, 2014
in Editor's News
Share on FacebookShare on Twitter

The Information Commissioner’s Office (ICO) should move from issuing monetary penalties to a stronger form of punishment for data loss and bad behaviour.
 
Speaking to IT Security Guru, privacy consultant Martin Hoskins asked what the fines had achieved, and said that they are not achieving their purpose. “If it is not changing behaviours, then it should not be allowed to continue as it is not fit for purpose. I’ve always been one for getting the chief executive to clean cars in the car park to make them personally accountable, because otherwise it is just money and it takes money away from the service users,” he said.
 
“None of us want bad behaviour, but how do we incentivise good behaviour and punish or stop bad behaviour? If it is clear that money has not altered behaviour or achieved behavioural change then they have failed and we should think of something else. How do we achieve good standards and what are they?”
 
Commenting, Dwayne Melancon, CTO of Tripwire, said: “Implementing fines for irresponsible behaviours relating to breaches seems like it should work, but I don’t believe they will make much of a difference, because they attempt to address the problem too late in the process. After all, you’re penalising people for bad behaviour, but the consequences aren’t felt until the horse has already left the barn.
 
“I’d much rather see an investment in catching problems earlier and creating pressure to develop good habits before a problem happens. Of course, that means an inspection and accreditation program which is much harder to implement and oversee, so I don’t see it happening.”
 
Hoskins said that jail sentences would help as it would make the CEO accountable and stop them from becoming CEO of another company in 12 months time. “They have got to appreciate it is a career limiting measure to preside over a company which deliberately allows poor data handling standards,” he said.
 
“You have got to make them think that something will happen to them. It is about time they were more accountable when things went wrong, and it would affect the next job they would have. We need a policy change, but there is less impact now as fewer people are talking about the fines.”
 
In response, an ICO spokesperson said: “The Information Commissioner’s Office has a range of enforcement options, including monetary penalty notices of up to £500,000.
 
“When the breach is a criminal offence, the ICO is continuing to call for more effective deterrent sentences, including the threat of prison, to stop the unlawful use of personal information.”
 
The ICO’s deputy commissioner and director for data protection David Smith previously said that it was pressing for custodial sentences, which would be ‘punishing for not doing things properly’.
 
Melancon said that the proposed move toward custodial sentences could be a good idea as public shaming and business consequences for misbehaving will be noticed and work fairly well in other situations.
 
“The challenge in all of this is gauging intent and determining the level and source of incompetence.  It’s one thing to go after someone who’s been wilfully and knowingly irresponsible, it’s quite another to condemn someone who didn’t have the data needed to drive different outcomes. Finding the balance so that the consequences are just could be very difficult.”

FacebookTweetLinkedIn
Tags: Compliancedata breachICO
ShareTweetShare
Previous Post

How to implement and nurture a security compliant culture

Next Post

EFF activists targeted in attack

Recent News

Nominations are Open for 2023’s European Cybersecurity Blogger Awards

Nominations are Open for 2023’s European Cybersecurity Blogger Awards

March 20, 2023
TikTok to be banned from UK Government Phones

TikTok to be banned from UK Government Phones

March 17, 2023
New AT&T Cybersecurity USM Anywhere Advisors Service Helps to Establish and Maintain Threat Detection and Response Effectiveness

Should Your Organization Be Worried About Insider Threats?

March 17, 2023
Guild Education controls API abuse with Salt Security

Guild Education controls API abuse with Salt Security

March 16, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information