Regulation with teeth - now all we need is full disclosure
By silicon.com
Published: 14 February 2007 16:55 GMT
When it comes to regulatory fines, especially those issued to companies for information abuse, one often feels disappointed. Time and time again, it seems, the policing fails to pack much of a punch.
Not today. It is easy to dismiss £1m as 'pocket change' in this era of mega-bonuses, lottery fortunes and soaring corporate profits. But you can bet that those that run the Nationwide won't see it that way.
Last year, an unencrypted laptop was stolen from the building society during a burglary at an employee's house. Nationwide then waited three weeks to start an investigation into the theft.
All this didn't bode well for the security of customers' details. The Information Commissioner was informed and the Financial Services Authority (FSA) investigated.
Some 11 million UK Nationwide customers - including several members of the silicon.com team - were sent letters about ways and means for better security.
Then today the FSA handed down a £980,000 fine, reduced from a potential £1.4m.
The level of publicity such a high fine will attract will probably hurt Nationwide more than the financial hit. But there are two other points to note here.
Firstly, as a mutual building society, it could be argued the fine hits members a second time - when interest rates go up or down (on borrowings or savings) by, say, a thousandth of a percentage point because of the cost incurred. Though that's a stretch and hard to quantify, even if true.
Secondly, it shows the UK should have full disclosure laws, as seen in California for example. While Nationwide has cooperated with the FSA, others may wait until they're backed into a corner to reveal details of any breaches. When an organisation suffers a breech and knows about it, it should be obliged to come forward. Let your customers, staff and shareholders know what the risks are - that's the message.
Last year this publication fought long and hard to name the e-tailer that had divulged credit card details of shoppers, meaning credit card companies had to reissue thousands of cards.
But the company in question held tight. It called our bluff.
Wouldn't it look worse if the truth were now to come to light?
Some exposure to Oracle RDBMS would be beneficial as would experience of either the E-Commerce sector or Credit Card-related applications. Java, ...
Do you have experience / knowledge of the Solicitors Regulatory Authority (SRA) or the Regulatory Arm of Law Society? Experienced in risk management? ...
You will also be give all the tools you need to do your job well, includiong: - Company car - Fuel card - Mobile phone - Laptop - Broadband Business ...
CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.
Stories from the web...
Copyright ©1995-2008 CNET Networks, Inc. All rights reserved. Top of page
Steve Boyle
Woolly risk analysis is hastening a housing crash
Comment: Lenders need a sane approach to avert a crisis
Carol Wheatcroft
Will consumers always want free banking?
Targeted, bundled services will be the way to profit...
Steve Boyle
Are rogue traders an inevitable evil?
Opinion: Managers must increase diligence to beat fraud
Julian Goldsmith
Profile: Nottingham Building Society head of IT Jack Cutts
'On the wide accountancy'...
Steve Boyle
Why you should be outsourcing your data centres
Concentrate on the core business...
Bob McDowall
Fixed-income electronic trading faces bleak 2008
Trading platforms likely to draw in their horns for downturn