The Information Commissioner’s Office (ICO) is marking its 40th anniversary by launching a digital exhibition telling the story of the most important moments in privacy and information rights over the past four decades. Our lives, our privacy: the 40 items that shaped 40 years of privacy right
Ico
The UK Information Commissioner is seeking permission to appeal the judgment of the Upper Tribunal on DSG Retail Limited (DSG) to the Court of Appeal. In 2020, the Commissioner fined DSG £500,000, the maximum amount under the Data Protection Act 1998 (DPA 1998), after a cyber attack that affec
The Information Commissioner’s Office (ICO) and the National Crime Agency (NCA) have signed a joint memorandum of understanding (MoU) that sets out how both organisations will cooperate to improve the UK’s cyber resilience. The aim of this work is to ensure that organisations across the
NHS Borders has been reprimanded by the Information Commissioner’s Office (ICO) after the parents of a premature baby who died at five days found out that the data that monitored his heartbeat before birth had been sent via WhatsApp to the on-call NHS consultant. The parents spoke of how
The Information Commissioner’s Office (ICO) has welcomed the ruling from the First-tier Tribunal (General Regulatory Chamber) on an appeal from Join the Triboo Limited. The online recruitment firm appealed a fine of £130,000 and an enforcement notice issued by the ICO in April 2023 for s
The Information Commissioner’s Office (ICO) has signed onto a new international multilateral agreement with the Global Cooperation Arrangement for Privacy Enforcement (Global CAPE) to cooperate in cross-border data protection and privacy enforcement. As part of the Global CAPE, the ICO will be
The Information Commissioner’s Office (ICO) has fined the Ministry of Defence (MoD) £350,000 for disclosing personal information of people seeking relocation to the UK shortly after the Taliban took control of Afghanistan in 2021. On 20 September 2021, the MoD sent an email to a distribu
The UK Information Commissioner (ICO) is seeking permission to appeal the judgment of the First Tier Tribunal (Information Rights) (Tribunal) on Clearview AI Inc. In its judgment the tribunal supported the ICO's view that US-based Clearview was processing personal information, which related to the m
The Information Commissioner’s Office (ICO) has issued an enforcement notice to the London Borough of Lewisham Council for failing to respond to hundreds of overdue requests made under the Freedom of Information Act (FOIA) 2000. The council revealed the true extent of its poor performance on i
Stephen Eckersley, ICO director of investigations, discusses the rationale behind the decision to begin publishing reprimands. John Edwards, UK Information Commissioner, recently set out our strategic approach to regulatory action when he said: “Members of the public, and those affected by a b
The Information Commissioner’s Office (ICO) has warned that companies are leaving themselves open to cyber attack by ignoring crucial measures like updating software and training staff. The warning comes as ICO issued a fine of £4,400,000 to Interserve Group Ltd, a Berkshire based constr
The Information Commissioner’s Office (ICO) has launched a second consultation on a draft code of practice about using personal data for journalism. The code provides practical guidance on how to comply with data protection legal requirements and good practice when using personal data for jour
The Information Commissioner’s Office (ICO) has today set out a revised approach to working more effectively with public authorities. This approach, which is outlined in an open letter from the UK Information Commissioner John Edwards to public authorities, will see use of the commissioner&rsq
The Driver and Vehicle Licensing Agency (DVLA) relied on the wrong legal basis to disclose motorists' personal data to private car parking companies seeking to recover unpaid parking charges, the Information Commissioner's Office (ICO) has ruled. In a six-page opinion published this month, the priva
The UK Information Commissioner has called on the criminal justice sector to immediately stop collecting excessive amounts of personal information from complainants in rape and serious sexual assault cases. The call is published in a Commissioner’s Opinion which informs the sector how to use p