Dutch govt consults on data breach reporting obligation

The Dutch ministry of security and justice has put together a bill on the obligation to report data breaches. The Data Protection Act (WbP) is to be adjusted and the text open to consultation up to 29 February. The WbP will be extended with a generally worded obligation to report loss or theft of data (Article 34a). In case of breach, the database administrator must make a risk estimate. If the case is serious enough, the administrator must inform privacy watchdog CBP and all parties concerned. The Telecommunications Act will have a reporting obligation (Article 11.3a) specifically aimed at telecommunications service providers. The supervision of both amendments will be handled by the CBP.