MPs call for new laws to punish data loss

A group of MPs has called for Prime Minister Gordon Brown to introduce new laws which would punish those who put people’s data at risk.

The report by the Justice Committee also recommended that powers be handed to Information Commissioner, Richard Thomas to carry out unannounced "spot checks" on procedures in firms and Whitehall departments, according to media reports.

Alan Bentley, Regional VP of Lumension Security EMEA, commented: “These latest proposals to punish reckless data leakage, with large financial fines and/or prison sentences, will go some way in encouraging organisations from the top down to be compliant or at least be able to prove they took the necessary steps to protect their data. However, the UK is not without laws surrounding this issue, we already have the Computer Misuse Act 1990 and the Data Protection Act.

“The question is how far this new law is taken. There is a very fine line that needs to be balanced, which ensures that all our personal data is secured, but does not hamper the efficiency of a business.

Alan Bentley, Regional VP of Lumension Security EMEA

“The question is how far this new law is taken. There is a very fine line that needs to be balanced, which ensures that all our personal data is secured, but does not hamper the efficiency of a business.

“For Government and industry organisations to take control of their data they need to monitor all the information transferred to and from removable media. Capturing a full copy of the data and providing a comprehensive audit trail, will ensure organisations can see where data has been moved to. Virtually all organisations track data being sent via email, but very few monitor what is written to or read from removable storage media. This needs to change.”