Ryan Bridge: Businesses should be scared to take our data

This Government has made fast-track a buzzword. After yet another massive hack of private information on Sunday, it needs to put that buzzword into action and sharpen up our privacy laws. Like, yesterday.  Especially if we're talking about your health information getting stolen and potentially posted online by hackers for a ransom.  The hackers it seems, are pretty much a mystery and never get caught. That ship seems to have sailed, and we can, at least for now, put that in the too hard basket.  But the folks we can fine, which we currently don't, are the businesses asking for our information and not doing enough to protect it in the first place.  If there was ever a need for better regulation and harsher penalties, it's with cases like this - what should be your private data.  In New Zealand, Consumer says there is no express penalty or fine for a breach.  The Privacy Commissioner has the power to issue a fine of $10k. Yes, just $10k. And that's only if a company doesn't report a breach of tries to hide it.  The Aussies will whack you with a fine of up to AU$50 million. That makes ours look like a slap with a wet bus ticket.  Companies should be scared to ask for your private information because the risk of it being nicked is evidently very high.  In two months, we're had the largest ever hack in our history, through Manage My Health, and now this MediMap breach.  Last week I went shopping for some new clothes, a few t-shirts and some shorts. I was asked for my name and email and address. Why? A mailing list no doubt.  I didn't have to provide this data, but if I did, I'd pay 10% less for the clothes. I paid full price but couldn't leave with a receipt unless I handed over my email.  Businesses want our information because they can sell us more stuff, but it should be illegal to ask unless the law requires it.  And if the data they do have is stolen, that should be their problem under the law. The fines ought to reflect how serious the breach is. With health, it ought to be millions.  They should be scared, like with health and safety laws, to even ask for your personal information. It's not like this problem has suddenly sailed into port.  That's why the legislation should be fast-tracked, bipartisan, and tough as nails.  Otherwise, we can all look forward to another data breach coming to a town near you soon. See omnystudio.com/listener for privacy information.