Labor to reconsider mandatory data retention laws for companies in light of major hacks

3 years ago by LineNoise to c/australia

New cyber security strategy cites business concerns at having to store large amounts of data for excessive periods of time, increasing breach risk

Zagorath 28 points 3 years ago

ShockedPikachu

You mean to tell me that storing more data means more data gets exposed during a breach‽ How could anyone have predicted this‽

Oh wait. Everyone in the industry said as much before the law was passed. 🙄

save

path: 0 5492465, hotness: undefined, score: 28, children: 1

WhatAmLemmy 10 points 3 years ago

Remember how the entire telco/IT industry recommended a full fibre broadband network, but the LNP said they could do it faster, better, cheaper... and are currently doing it twice for thrice the price? Yeah... Tell me again why anyone trusts politicians?

save

path: 0 5492465 5500378, hotness: undefined, score: 10, children: 0

LineNoise 19 points 3 years ago

From 8 years ago when Labor helped pass the laws: https://www.theguardian.com/...

save

path: 0 5492051, hotness: undefined, score: 19, children: 1

Affidavit 8 points 3 years ago

Interesting tidbit from Labor (Jacinta Collins): "...We accept that and we take responsibility for that..."

Glad to see they're admitting they're the ones responsible for this mess. Now, how are you going to compensate me for my stolen data?

save

path: 0 5492051 5496608, hotness: undefined, score: 8, children: 0

Fluid 17 points 3 years ago

save

path: 0 5496057, hotness: undefined, score: 17, children: 1

spiffmeister 5 points 3 years ago

Yeah but how are the cops supposed to access our data without a warrant or any form of notice?

save

path: 0 5496057 5513925, hotness: undefined, score: 5, children: 0

Pons_Aelius 10 points 3 years ago

Gov: We wanted to have access to the data, so we forced companies to retain it. But we also expected them to keep it secure...

save

path: 0 5492216, hotness: undefined, score: 10, children: 0

autotldr 2 points 3 years ago

This is the best summary I could come up with:

“Technological advancements have enabled malicious actors to develop vast data profiles on businesses, individuals and officials for intelligence gathering and commercial purposes.”

The strategy points out that businesses have voiced concerns that they are required to store substantial amounts of data for excessive periods of time, making them potentially high-value targets for hacking.

This was something raised in the wake of the Optus and Medibank data breaches, where tens of millions of customer records dating back years were exposed, with some then ending up on the dark web.

Alistair MacGibbon, senior strategy officer at CyberCX, told Guardian Australia a good rule of thumb was that businesses cannot lose or misuse data they do not keep in the first place.

“We need corporations and government to have that view, but that doesn’t mean no information should be collected or retained, including for law enforcement purposes.

MacGibbon said there was a tendency for businesses to misinterpret their collection obligations, and that there was value in reviewing the existing laws to see if they were still fit for purpose.

The original article contains 552 words, the summary contains 176 words. Saved 68%. I'm a bot and I'm open source!

save

path: 0 5492037, hotness: undefined, score: 2, children: 0

rainynight65 1 point 3 years ago

save

path: 0 5526586, hotness: undefined, score: 1, children: 0