The Information Commissioners Office (ICO) has been granted new powers. The data watchdog has had one of its requests answered, gaining the ability to impose 'substantial' fines on business that lose data.
The new powers are enabled by the Criminal Justice and Immigration Act which this week received Royal Assent, meaning that it has passed into law. The legislation gives the ICO the power to, " impose substantial fines on organisations that deliberately or recklessly commit serious breaches of the Data Protection Act.
David Smith, Deputy Information Commissioner said, “This change in the law sends a very clear signal that data protection must be a priority and that it is completely unacceptable to be cavalier with people’s personal information. The prospect of substantial fines for deliberate or reckless breaches of the Data Protection Principles will act as a strong deterrent and help ensure that organisations take their data protection obligations more seriously.
“This new power will enable some of the worst breaches of the Data Protection Act to be punished. By demonstrating that the law is being taken seriously tougher sanctions will help to reassure individuals that data protection matters and give them confidence that organisations have no choice but to handle personal information properly.
The ICO has repeatedly called for stronger powers since the Data Protection Act came into force.
See also:
If firms want to avoid tougher penalties and more regulation, they must step up their data protection efforts 02 May 2008
While malicious attacks tend to grab the headlines, the prime causes of data breaches are usually more mundane 24 Apr 2008
The Information Commissioner's Office has some strong advice for firms making data breaches 01 Apr 2008
Breach of security protocol at Ministry of Defence allowed access to soldiers' personal details 12 Feb 2008All Privacy & Data
