Ico

The Information Commissioner’s Office (ICO) has fined Merseyside-based DPP Law Ltd (DPP) £60,000, following a cyber attack that led to highly sensitive and confidential personal information being published on the dark web. The ICO found DPP failed to put appropriate measures in place to

The Information Commissioner’s Office (ICO) is taking action to tackle significant delays for people who are trying to access copies of their personal information held by local authorities across Scotland. Under data protection law, people have the right to ask an organisation if it holds thei

The Information Commissioner's Office (ICO) has launched a free online tool to help organisations ensure their direct marketing activities comply with the Privacy and Electronic Communication Regulations (PECR) and the UK GDPR. By answering a few questions, the tool aims to bring the relevant guidan

The Information Commissioner’s Office (ICO) is marking its 40th anniversary by launching a digital exhibition telling the story of the most important moments in privacy and information rights over the past four decades. Our lives, our privacy: the 40 items that shaped 40 years of privacy right

The UK Information Commissioner is seeking permission to appeal the judgment of the Upper Tribunal on DSG Retail Limited (DSG) to the Court of Appeal. In 2020, the Commissioner fined DSG £500,000, the maximum amount under the Data Protection Act 1998 (DPA 1998), after a cyber attack that affec

The Information Commissioner’s Office (ICO) and the National Crime Agency (NCA) have signed a joint memorandum of understanding (MoU) that sets out how both organisations will cooperate to improve the UK’s cyber resilience. The aim of this work is to ensure that organisations across the

NHS Borders has been reprimanded by the Information Commissioner’s Office (ICO) after the parents of a premature baby who died at five days found out that the data that monitored his heartbeat before birth had been sent via WhatsApp to the on-call NHS consultant. The parents spoke of how

The Information Commissioner’s Office (ICO) has welcomed the ruling from the First-tier Tribunal (General Regulatory Chamber) on an appeal from Join the Triboo Limited. The online recruitment firm appealed a fine of £130,000 and an enforcement notice issued by the ICO in April 2023 for s

The Information Commissioner’s Office (ICO) has signed onto a new international multilateral agreement with the Global Cooperation Arrangement for Privacy Enforcement (Global CAPE) to cooperate in cross-border data protection and privacy enforcement. As part of the Global CAPE, the ICO will be

The Information Commissioner’s Office (ICO) has fined the Ministry of Defence (MoD) £350,000 for disclosing personal information of people seeking relocation to the UK shortly after the Taliban took control of Afghanistan in 2021. On 20 September 2021, the MoD sent an email to a distribu

The UK Information Commissioner (ICO) is seeking permission to appeal the judgment of the First Tier Tribunal (Information Rights) (Tribunal) on Clearview AI Inc. In its judgment the tribunal supported the ICO's view that US-based Clearview was processing personal information, which related to the m

The Information Commissioner’s Office (ICO) has issued an enforcement notice to the London Borough of Lewisham Council for failing to respond to hundreds of overdue requests made under the Freedom of Information Act (FOIA) 2000. The council revealed the true extent of its poor performance on i

Stephen Eckersley, ICO director of investigations, discusses the rationale behind the decision to begin publishing reprimands. John Edwards, UK Information Commissioner, recently set out our strategic approach to regulatory action when he said: “Members of the public, and those affected by a b

The Information Commissioner’s Office (ICO) has warned that companies are leaving themselves open to cyber attack by ignoring crucial measures like updating software and training staff. The warning comes as ICO issued a fine of £4,400,000 to Interserve Group Ltd, a Berkshire based constr

The Information Commissioner’s Office (ICO) has launched a second consultation on a draft code of practice about using personal data for journalism. The code provides practical guidance on how to comply with data protection legal requirements and good practice when using personal data for jour