ICO lauds success of data breach fines
Data protection watchdog's annual report reveals it has generated £2 million in fines since 2010.
The Information Commissioner's Office (ICO) has confirmed that it has issued 21 data breach fines totalling 2 million since April 2010.
The data protection watchdog was given powers to issue financial penalties against firms that fall foul of the Data Protection Act (DPA) in April 2010.
The Information Commissioner, Christopher Graham, said the number of penalties it has issued should spur companies on to take better care of their data.
We hope these penalties send a clear message to both the public and private sector.
"We hope these penalties send a clear message to both the public and private sectors that they cannot afford to fail when it comes to handling people's data correctly," he said.
The figures were published in the ICO's 2011/2012 annual report, which revealed a small drop in the number of data protection complaints it has received over the past year.
The findings show there were 12,985 data protection complaints made to the ICO, which is 0.3 per cent lower than in 2010/2011.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
However, the organisation noted a 43 per cent rise in the number of complaints about unsolicited marketing calls and texts, totalling 7,095.
Graham stressed this was an important area of focus for the ICO, as it now has powers to fine the companies responsible up to 500,000.
"We have now set up a dedicated team to enforce the Privacy and Electronic Communication Regulations and are working to identify the operators responsible," he said.
"The ICO has executed search warrants at a number of sites across the UK linked to companies we believe are breaking the law.
"We have also set up an online reporting mechanism on our website that allows people to report any marketing texts or calls from unidentified senders," he added.
The ICO also announced that it has fined a financial services firm 150,000 for losing two backup tapes containing personal details belonging to half a million customers.
The tapes, which belonged to Welcome Financial Services Limited, were lost last November and have never been recovered.
-
What does modern security success look like for financial services?Sponsored As financial institutions grapple with evolving cyber threats, intensifying regulations, and the limitations of ageing IT infrastructure, the need for a resilient and forward-thinking security strategy has never been greater
-
Yes, legal AI. But what can you actually do with it? Let’s take a look…Sponsored Legal AI is a knowledge multiplier that can accelerate research, sharpen insights, and organize information, provided legal teams have confidence in its transparent and auditable application
-
23andMe 'failed to take basic steps' to safeguard customer dataNews The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuseNews The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victimsNews Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlashNews UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
-
UK's data protection watchdog deepens cooperation with National Crime AgencyNews The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
-
ICO slams Electoral Commission over security failuresNews The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firmsNews Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
-
ICO reprimands Coventry school over repeated data protection failuresNews The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach