ICO granted new powers to enforce data protection

As a result of small business owners and their employees failing to effectively address data protection problems, the Information Commissioner's Office (ICO) has been granted new powers this week.

These new powers enable the ICO to fine businesses up to £500,000 for serious breaches of the Data Protection Act (DPA).

Christopher Graham, the Information Commissioner, commented:

"As citizens, we are increasingly asked to complete transactions online, with the state, banks and other organisations using huge databases to store our personal details. When things go wrong, a security breach can cause real harm and great distress to thousands of people."

He added that the ICO remains committed to working closely with public, private and voluntary organisations to help them adhere to the rules and comply with the DPA.

However, he added:

"I will not hesitate to use these tough new sanctions for the most serious cases where organisations disregard the law."

Many industry leaders have welcomed the new powers granted to the ICO:

"UK businesses should take note of the new rules and ensure they have effective data protection compliance measures in place to meet the ICO's standards", commented Jonathon Nugent, solicitor with PriceWaterhouseCoopers Legal.

Mr Nugent added:

"This is part of a wider move to strengthen the enforcement of data protection laws in response to a number of high-profile data breaches."

07/04/10