Privacy Commission Introduces Online Notification Forms to Report Personal Data Breaches

The Belgian Privacy Commission introduced online notification forms for reporting data breaches, including a specific form (source document in French) for breaches in the telecommunication sector (notification within 24 hours) and a general form (source document in Dutch) for breaches in other sectors (notification within 48 hours but no legal obligation at this stage). This follows a recommendation (source document in Dutch) of the Privacy Commission in 2013 providing several safety measures in order to prevent such breaches.

DPAs Close SWIFT Enquiry

The Belgian Privacy Commission and the Dutch Data Protection Authority concluded on May 8 that the Society for Worldwide Interbank Financial Telecommunication ("SWIFT") did not violate any legal security requirements of computer networks. The investigation started at the end of 2013 and focused on the security of financial data messages in response to media allegations about U.S. security intrusion.

DPAs Conduct First Coordinated Inquiry into Mobile Applications

The Global Privacy Enforcement Network ("GPEN"), which regroups several data protection authorities ("DPAs") including the Belgian Privacy Commission, published the findings of its first internet privacy sweep, held between May 6 and May 12. The findings focus on transparency (adequate privacy policy) for mobile applications. GPEN has already announced the future publication of additional findings focusing on information provided to mobile applications users and consent, forthcoming this fall.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.