A Financial Times report points to a breach that occurred at a Dutch telecoms company--discovered in January but not announced until February--as evidence that a breach notification law is needed. In accordance with the European ePrivacy Directive from 2002, EU countries should have implemented a breach notification law; however, the European Commission last year took action against 20 of the 27 member states for not complying with the directive. The report states the Dutch government supports a breach notification law, but Daphne van der Kroft of the Dutch digital rights organisation Bits of Freedom says, "It's going to take a long time before there's a law on the books."
Full Story