A bill wants to create a tool dedicated to consumers to assess the security of their data on internet platforms.

-

Pixabay / fancycrave1

This tool would be a “Cyber-Score” and would operate on the “Nutri-Score” model, intended to inform consumers of the nutritional value of food products.

It would make it possible to better warn users of digital tools on the security of their data.

This idea is that of Laurent Lafon, new centrist president of the Culture committee.

He explains that he has tabled a bill on this subject "on leaving confinement", in view of the considerably increased use of digital tools, such as videoconferencing platforms.

This is examined at first reading Thursday in the Senate.

A "real lack" in terms of consumer information

As the rapporteur Anne-Catherine Loisier (centrist) notes, "many texts already govern cybersecurity, starting with the GDPR (general data protection regulation), which requires the use of sufficiently secure information systems".

But, for Ms. Loisier, there is a "real lack" in terms of consumer information.

The idea is therefore to complete the consumer code by adding an obligation for operators to communicate information relating to the security of data hosted by themselves or their service providers, particularly in the cloud.

With the objective of achieving "a clear and understandable visual", specifies Laurent Lafon, on the model of "nutriscore".

The indicators would be set by decree and the diagnosis carried out by bodies authorized by the National Agency for the Security of Information Systems (Anssi).

"The government says it is interested in the process"

"The government says it is interested in the process," said Laurent Lafon.

The question of the scope of application is nevertheless debated.

In the initial text, Laurent Lafon mentioned “digital platforms”.

In committee, the senators extended the field of application "to all digital services": websites, online software and applications, videoconferencing software.

The government has tabled an amendment aimed at "refocusing the system on the main operators of online platforms", ie "platforms with at least five million unique visitors per month".

This amendment also removes the obligation to use authorized bodies, giving operators the possibility of carrying out a self-assessment of their data protection system.

To be definitively adopted, a bill must be adopted in the same terms by the two chambers of Parliament, the National Assembly and the Senate.

High-Tech

MalLocker.B: Data-kidnapping malware wreaks havoc on Android

High-Tech

Facebook: Hackers Steal User IDs By Mimicking Social Network's Web Page

  • Cybersecurity

  • Internet

  • Personal data

  • GDPR

  • High-Tech