Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

11/17/2008
10:12 AM
Keith Ferrell
Keith Ferrell
Commentary
50%
50%

Privacy & Protection Challenges: The European Perspective

Curious about how other nations are addressing security and privacy concerns? A new report from an EU agency offers some interesting and provocative insights.

Curious about how other nations are addressing security and privacy concerns? A new report from an EU agency offers some interesting and provocative insights.The European Network and Information Security Agency (ENISA) has issued a detailed report calling for a variety of responses -- and legislation -- aimed at creating a consistent and comprehensive posture toward data privacy and data breaches.

Key recommendations include:

Granting individuals the legal right to have access to information companies have collected about them.

A call for a comprehensive security breach notification law.

A call for the legal instruments necessary to to identify the best available techniques for auditing data collection.

Perhaps most interesting -- and, I think, most challenging -- is the report's recommendation that tools be created aimed at "keeping personal data of citizens within the EU jurisdiction" and to "manage proximity and distance with others in the digital space, both in a legal and a social sense."

Whether or not the larger ambitions and undertakings raised by the report are achievable -- or, depending on your own perspective, worthwhile -- the scope and level of consideration here is well worth a look.

Be interesting to know if any of our own politicians and officials are looking as well. (You can bet that plenty of corporate lawyers are.)

The entire ENISA report is here.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-25250
PUBLISHED: 2021-04-13
An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privil...
CVE-2021-25253
PUBLISHED: 2021-04-13
An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to exec...
CVE-2021-28645
PUBLISHED: 2021-04-13
An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target ...
CVE-2021-28646
PUBLISHED: 2021-04-13
An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations.
CVE-2021-28647
PUBLISHED: 2021-04-13
Trend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program.