Showing posts with label UK. Show all posts
Showing posts with label UK. Show all posts

Tuesday, December 22, 2009

ICO consults on online privacy



The Information Commissioner's Office (ICO) has launched an online consultation on a new draft code of practice to help organisations protect individuals' privacy online.

The draft code of practice explains data privacy law and calls on organisations to give people "the right degree" of control over their personal information.

The report suggests organisations give clear privacy choices to making it easier for people to erase their personal information at the end of a browsing session.

In a speech to delegates at the Personal information online conference in Manchester, Information Commissioner Christopher Graham said: "Customers can always vote with their feet and punish organisations that they feel have let them down - which serves as a very real reminder that getting privacy online wrong is a risky game to play. People should have control over what happens to their personal information online whether it's correcting inaccuracies, deleting profiles or choosing the privacy settings that suit them."

The draft code of practice includes guidance on when to collect information and when not to, cloud computing and improving individuals access to data held on them.

Iain Bourne, Head of Data Protection Projects at the ICO, said: "Collecting information about people in the proper way, including making them fully aware of what will happen to their personal information and how they can access it and keep it accurate, lies at the heart of good privacy protection.

"The draft code of practice explains a difficult area of the law and provides practical advice on a range of online privacy issues. It urges organisations to do more to explain what they do with the information they collect about people and to make sure they use it in line with individuals' wishes."

The consultation ends on 5 March 2010. A link to the online consultation can be found at http://www.ico.gov.uk/

Read more at Publicservice.co.uk


Data Protection Act offences: new powers for the ICO

By PAULA BARRETT

A new power to issue fines against offenders, first approved by Parliament in 2008, will soon come into force. The latest from the Information Commissioner’s Office is that this will be from April 2010.


The Ministry of Justice is the Government department responsible for the changes and, as many of you will know, it shall have final determination over the exact timescale.

From the commencement date, the ICO will be able to issue what are expected to be “substantial” fines against data controllers (ie businesses and organisations using personal information from their employees, customers or other individuals on their own behalf) without prior warning, for deliberate or reckless breaches of the Data Protection Act (DPA).

The Ministry of Justice published a consultation paper on 9 November proposing that the maximum civil monetary penalty which can be imposed for serious breaches of the data protection principles should be £500,000.

Other details, such as whether the ICO will be allowed to fine individuals (for example directors) as well as the organisations themselves are still to be confirmed.

- Increase in potential monetary penalties: welcomed by many

- Overlap between the ICO and the FSA

- Enhanced sanctions approved by Parliament

- Serving a notice of intent

Read more on the above issue(s) at info4SECURITY.com