The UK Information Commissioner’s Office (ICO) is not showing any signs of relaxation as far as its reinvigorated enforcement policy is concerned. In recent weeks, the ICO has successfully prosecuted a Manchester debt recovery firm and two London lawyers for various offences under data protection law. Following thousands of complaints from individuals and businesses to the ICO, ADC Organisation Ltd pleaded guilty to six charges under the Privacy and Electronic Communications Regulations and must pay a total of £2,500 in fines and costs. In addition, Olubi Adejobi of Grier Olubi Solicitors and Robert Bentley of Bentley’s Solicitors, both based in London, were each fined £300 and ordered to pay costs of £500 for failing to notify as data controllers despite repeated reminders from the ICO.
The ICO has also found Skipton Financial Services (SFS) in breach of the Data Protection Act. This follows the theft of an unencrypted laptop which contained the personal information of 14,000 SFS customers.The laptop, which contained names, dates of birth, national insurance numbers and investment amounts, was stolen from an SFS contractor. It is the ICO’s view that SFS should have had appropriate encryption measures in place to keep the data secure.