Information Commissioner's Office

Subscribe to Information Commissioner's Office

Following the publication of its “further thoughts” on the European Commission’s proposed new data protection framework, the ICO has now published an in-depth, article-by-article analysis of the proposed General Data Protection Regulation (the Regulation). The ICO pointed out that this is an important opportunity to get the framework correct, as it is likely to remain…

The UK Information Commissioner’s Office (ICO) has published a report detailing compliance and consumer concerns about use of cookies, following the changes under Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 (PECR), which require consent, more transparent notice and opt-out.

In response to more than 550 consumer complaints about implied consent mechanisms and the…

In a clampdown on the UK’s growing illegal telemarketing, the Information Commissioner’s Office (ICO) issued its first monetary penalties under the Privacy and Electronic Communications Regulations 2011 (PECR) in November.

Following an 18-month investigation, Christopher Niebel and Gary McNeish of Tetrus Telecoms were fined £300,000 and £140,000 respectively for distributing up to 840,000 illegal spam…

The UK Information Commissioner’s Office (ICO) has published a code of good practice on managing the risks related to anonymisation. Christopher Graham, UK Information Commissioner, believes this to be the first code of practice on anonymisation to be published by any European data protection authority, but Liechtenstein published a guide on anonymisation and pseudonymisation earlier…

The EU’s proposed EU Data Protection Framework encourages the use of privacy seals, certification mechanisms and trust marks. Any organisation which has obtained a privacy seal would be considered to have attained a ‘stamp of approval’, indicating good privacy standards.

Anticipating the development of data protection kite marks, the UK Information Commissioner’s Office has launched…

The UK Information Commissioner’s Office (ICO) served a monetary penalty of £50,000 on Prudential, after Pru merged accounts of two people with the same name and same date of birth five years ago. The “mix-up” in administration of two accounts culminated in tens of thousands of pounds ending up in the wrong account. Despite repeated…

Since March of this year, the Information Commissioner’s Office (ICO) has been asking members of the public to report any calls or texts they have received from unknown senders by using an online survey. The survey information has allowed the ICO to focus its investigations on organisations responsible for making unsolicited communications. The ICO received…

The UK Information Commissioner’s Office (“ICO”) has issued guidance on the deletion of personal data. Through this guidance, the ICO seeks to assist organisations with their obligations under the Data Protection Act 1998 (“DPA”) and to promote good practice. The ICO acknowledges that times have changed and that, while one may think placing data in…