Fran Foo reports: Security experts fear that new privacy legislation has so many loopholes that it will lead to organisations inadvertently claiming to have a security strategy in place to combat hackers. Phil Kernick, national head of information security at CQR, says the Office of the Australian Information Commissioner should do more to make organisations…
Category: Breaches
KR: Standing committee passes ‘Privacy Act’ to beef up regulations on personal data
Connie reports: To strengthen regulations on protecting personal information following a recent data leak by credit card companies here in Korea a new privacy protection bill is moving through the National Assembly. The bill, passed Wednesday by the Security and Public Administration standing committee, would require financial institutions and other public companies to use encrypted…
Dating app spent months as STALKING app
Richard Chirgwin reports: The popular dating app Tinder spent months last year leaking excessive location data about its users. According to Include Security, the bug arose when Tinder implemented a fix to an older security issue that emerged in July 2013 (in which users could get other users’ geolocation in latitude and longitude, discovered by the same company)….
Minnesota data breach law demonstrates risks of knee-jerk reactions
I just shook my head yesterday when I heard about a proposed law in Minnesota that would require breach notification within 48 hours of discovery, the offer of free credit monitoring for one year, and golly gee, a $100 gift card that would be valid for one year if the breached entity was a retailer. …