British data leak row highlights need for legislation

MasterCard and Visa, who recently informed consumers about a leak of credit card details from a British retailer, have refused to identify the careless company. Those affected by the leak are now insisting they have a right to know who failed to protect their private data. Analysts at InfoWatch suggest the best way to avoid an escalation of the conflict would be to introduce legislation to regulate such incidents.

Late last month it was revealed that 4,000 MasterCard and Visa credit card numbers were leaked by a British retail company. However, the credit card companies and banks have refused to disclose the name of the guilty company.

According to Silicon.com, that decision has aroused some strong feelings among those affected and the general public. Many consumers insisted that they have a right to know the name of the company at fault, hinting that they would not use their services in future.

British legislation in no way addresses these kinds of conflicts, in stark contrast to the U.S. where most states have their own laws on leaks of private data. Under some U.S. state laws, a company that permits leaks or thefts of confidential data has to inform everyone affected, as well as the law enforcement agencies. The latest incident in Britain merely underscores the need for similar laws not only across the U.S. but in other countries as well.

“If the situation is not regulated by legislation, then each side will stand their ground. The credit card companies will keep silent, while affected consumers will demand justice. I think that, following some major leaks, British lawmakers could also adopt a specific law on leaks of private data,” says Denis Zenkin, marketing director at InfoWatch.

Source: Silicon.com

l.12-.057c.834-.407 1.663-.812 2.53-1.211a42.414 42.414 0 0 1 3.345-1.374c2.478-.867 5.078-1.427 7.788-1.427 2.715 0 5.318.56 7.786 1.427z" transform="translate(-128 -243)"/>