Will the ICO change its approach to the public sector following more high profile data breaches in some of the UK’s Police Forces? Yesterday Simon Bryne, Chief Constable of the Police Service of Northern Ireland (PSNI), resigned. Amongst a number of issues leading up to the resignation was the accidental publication of the details for […]
Will the ICO change its approach to the public sector? Read More »
It is noteworthy that, once again, the ICO continues with a soft touch, implementing a revised approach to the public sector, on this occasion issuing a reprimand to both Surrey and Sussex Police, suggesting that large fines could lead to reduced budgets. Aside from the fact that most businesses are currently operating in a financially
The Information Commissioner’s Office (ICO) published its report for the year 2017/18 last month, containing a useful update on the prevalence of information security issues. Firstly, the ICO reported that the number of data protection concerns raised had risen to 21019 (up 15% from last year). In a similar pattern to last year, 32% of
ICO Reports Increase in Data Protection Concerns and Self-Reported Breaches Read More »
🛡️ The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance In July 2025, the veil of secrecy was finally lifted on one of the most catastrophic data breaches in UK government history. A spreadsheet leaked by a Ministry of Defence (MoD) official exposed the personal details of nearly 19,000 Afghan nationals
The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance Read More »
The ICO Fine: A Call for Accountability in Data Protection Across the Supply Chain The announcement of the substantial fine levied on Advanced Computer Software Group Ltd by the Information Commissioner’s Office (ICO) brings the critical issue of data protection to the forefront once again. While the failings of the software provider are evident, this
The UK General Data Protection Regulation (UK GDPR) is a comprehensive set of regulations that was created to protect the personal data of UK citizens. It applies to all organizations, both inside and outside the UK, that process or store the personal data of UK citizens, and is based on the EU General Data Protection
What is data protection by design? This is about implementing an approach that ensures that data protection and privacy issues are considered throughout the lifecycle of a project. GDPR requires that you take measures to show that you have considered data protection, and taken privacy measures into account in your data processing measures. Data Protection
We recommend that businesses should have a Data Protection Policy in place. This Policy will set out how your organisation will protect personal data, describing the processes that you and your staff will follow. The Data Protection Policy should not be confused with the ‘Privacy Notice’ or ‘Privacy Policy’, as this is an internal document
Over four years after the implementation of GDPR across Europe, three clear leaders have emerged in terms of the numbers of fines issued for breaches of Articles 32, 33 and 34. According to the GDPR Enforcement Tracker website, the most prolific regulators are: Romania – 47 fines Italy – 32 fines Spain – 32 fines
Romania, Italy and Spain Lead the Way in GDPR Fines Read More »
17 years ago today, London was shaken by a series of terrorist bombings on public transport that left 56 people dead and hundreds injured. As well as remembering all those affected by the tragedy, it is timely to reflect on the lasting legacy of that day. Although living and working in London at the time,
