Wednesday, March 2, 2011

Internet: A decree requires service providers to keep passwords

A decree published Tuesday, March 1 in the Official Journal requires hosts and Internet service providers to keep for one year a series of personal data of the user, as its confidential codes, and its web browsing. "The shelf life data (...) is one year," said the decree made under the Act of June 21, 2004 "Confidence in the Digital Economy".

This law provides that the police and gendarmerie may require such information "to prevent acts of terrorism (...)". "For each connecting their subscribers' web hosts and Internet service providers are required to" hold "wide range of information and very specific, according to the decree.

They must therefore safeguard "the information upon subscription of a contract or by a user when creating an account", namely "the full name or business name", "postal addresses associated" "used the pseudonyms", "e-mail addresses or account associated", "telephone numbers" or "password and the information needed to verify or modify." SAVE THE MEANS OF PAYMENT, YOUR REFERENCE, THE AMOUNT More generally, the hosts must keep "the identifier of the connection," "the identifier of the terminal used for connection", "dates and times of start and end of connection "or" the characteristics of the subscriber's line.

" For every action a user on the Web, "the nature of the operation" should be recorded by these service providers, whether to write an e-mail or download an image or video, as well as "The date and time," the text directs. "When the subscription contract or account is not free", hosters and service providers on the Web must also retain the payment method, its reference, its value as "the date and time of the transaction," says there.

Commission Nationale Informatique et Libertés, CNIL, which defends the respect for privacy on the Internet, said he had made, starting in 2007, an opinion on the subject, but it is not public.

No comments:

Post a Comment