ICO

Agreement Reached Between ICO and Cabinet Office on Reduced Fine Following New Year Honours Data Breach

The UK Information Commissioner and the Cabinet Office have reached an agreement to reduce the fine imposed on the Cabinet Office due to a data breach in the 2019 New Year Honours list, from £100,000 to £50,000.

Ensuring Protection of Personal Information in International Transfers: Innovative Strategies to Enable Growth

This work aims to empower innovation and growth for businesses and organisations making international transfers of data while protecting people's personal information.

Investigating the Regulatory Actions of the ICO: A Strategic Plan for Moving Forward

The ICO has launched a consultation to explain their new approach to prioritizing and fast-tracking FOI and EIR appeals in order to reduce their backlogs and better serve the public.

Strengthening the Partnership Between ICO and Ofcom for Online Safety and Data Protection

The ICO and Ofcom have strengthened their partnership to ensure greater alignment and consistency in online safety and data protection.

Ensuring Compliance with Data Protection Laws in the Public Sector

This article outlines the UK Government's revised approach to data protection in the public sector, which aims to ensure compliance and protect people's information.

Over Two Million in Penalties Issued by ICO for Unlawful Marketing Calls

Five companies have been fined a total of £435,000 by the Information Commissioner's Office (ICO) for making nearly half a million unlawful marketing calls to people registered with the Telephone Preference Service, some of which appeared to be targeted at elderly and vulnerable individuals.

Examining the ICO's Revised Regulatory Approach to Electronic Communications Service Providers Under PECR

The ICO has updated their approach to regulating communication service providers by allowing for discretion in enforcing monetary penalties under Regulation 5C PECR if the incident is reported within 72 hours and not 24 hours, while still expecting CSPs to report incidents that are likely to adversely affect personal data or privacy of users within 24 hours.