The House of Lords Science and Technology Committee has launched an inquiry
into why most of its security recommendations have been rejected by the
government.
The committee is writing to those who gave evidence in its first inquiry and
to those that expressed views after the government’s rejection. A follow-up
report will be published in early summer.
The Lords made recommendations for new security policies in a report called
Personal Internet Security, published in August 2007.
They made radical calls for vendors to take liability for flawed products,
data breach notification laws, increased resources and skills for the police to
deal with internet-based crime, and the reversal of the requirement that victims
of online card fraud report crimes to banks rather than police.
The Lords expressed concern when the government responded in October 2007
dismissing most of the report’s recommendations, but with new circumstances, the
Lords believe there is even more reason their proposals are recognised.
“The committee was disappointed with the government’s response to its report.
We felt they had failed to address some of our key concerns about people’s
security on the internet,” the committee's chairman, Lord Sutherland, said in a
statement.
A spokesman for the committee said one of the most important points made by
the Lords is the data notification law, which would mean authorities would have
to disclose any data breaches. “The fact that the government changed its mind on
the powers held by the Information Commissioner after the HMRC discs went
missing shows the government has room to agree to more security commitments,” he
said.
The loss of confidential data by HM Revenue and Customs had caused the
government to increase the powers of the Information Commissioner's Office to
inspect organisations holding sensitive data on members of the public.
Comments
Have your say on this article