The Information Commissioner’s Office is warning people of the risk of holdings on the sensitive personal data when they change jobs or leave a company. It follows an investigation into the actions of two former Metropolitan Police officers who – having retained their notebooks – subsequently leaked information about a case in the media. Although […]
Read MoreLEARN FROM A DATA BREACH
The following are key thoughts and actions Comsure walked a client through after a recent data breach Report data violations promptly in line with data protection laws and regulatory responsibilities there should be accountability and data security should be a priority. Implement controls and safeguards to mitigate the risks for example, by promoting a security […]
Read MoreBounty pregnancy club fined £400,000 over data handling
Pregnancy club Bounty UK has been given a £400,000 fine for illegally sharing the personal information of more than 14 million people. The fine was issued by the Information Commissioner’s Office (ICO) in what it said was an “unprecedented” case. Bounty compiled personal data but did not tell people that it was shared with 39 other organisations, […]
Read MoreUK ICO AND FCA update their Memorandum of Understanding (MoU)
On 18 February 2019, the Information Commissioner’s Office (ICO) and the Financial Conduct Authority (FCA) updated their Memorandum of Understanding (MoU) with an aim to reinforce and develop their cooperation, collaboration, and information and intelligence sharing. Cooperation and information sharing The ICO and FCA have set out what matters they will communicate with each other […]
Read MoreCeredigion council data breach ‘could have lasted 11 years’
Sensitive personal information could have been on a council’s website for 11 years, it has been claimed. Documents containing people’s names, addresses and medical conditions were publicly available on Ceredigion Council’s website on Thursday. The man who notified the council of the breach said he reported the same data on the council’s website in 2007. […]
Read MoreHeathrow fined for USB stick data breach
Heathrow Airport has been fined £120,000 by the Information Commissioner’s Office for “serious” data protection failings. It comes after a staff member lost a USB stick last October containing “sensitive personal data”, which was later found by a member of the public. Reports at the time claimed this included the Queen’s security and travel arrangements, […]
Read MoreJFSC issues ICO guidance note
The Jersey Financial Services Commission (JFSC) has today issued a guidance note containing information about our approach to ICO activity. ICOs are a digital way of raising funds from the public using distributed ledger technology. The guidance note details the JFSC’s approach to businesses that wish to launch an ICO in Jersey. The note sits […]
Read MoreCarphone Warehouse fined for ‘striking’ number of failures that led to data breach
Carphone Warehouse has been fined £400,000 by the Information Commissioner’s Office for a series of “systemic failures” uncovered following a data breach in 2015. The ICO described the “number of distinct and significant inadequacies in the security arrangements” of Carphone Warehouse as “striking”, and said that it was “ particularly concerning that a number of the inadequacies related to basic, […]
Read More