Archive for April 14th, 2010

New sanctions for breach of data protection legislation

Last week saw some important changes in the powers of the Information Commissioner to enforce data protection legislation.

We have just issued an update explaining those changes. It’s worthwhile reading for all organisations which handle personal data – information about identifiable, living individuals, whether staff, clients/service users, contacts or otherwise. 

The main point to note is that, for the first time, a deliberate or reckless, serious failure to comply with any of the eight data protection principles in the Data Protection Act 1998 (the “DPA”) could result in a fine of up to £500,000.  So, for example, a failure to put in place adequate systems to protect against the theft or loss of personal data, or to ensure that personal data is only shared with other organisations to the extent permitted by the DPA, could now result in a very substantial fine.

The amounts involved look set to persuade even the most reluctant of organisations to pay more attention to data protection compliance. If the threat of regulatory sanction still doesn’t seem real at this early stage in the new regime, it no doubt will when the first fines have been handed out. Those on the receiving end will be faced not only with paying them, but also with the negative publicity and related legal and commercial problems which a penalty of this nature could bring.

No time like the present then to have a look at your policies, procedures and practices relevant to the handling of personal data and identify (and prioritise) any issues which require to be addressed.

Digital Economy Act – Part 1 – Impact on Site Owners (and ISPs)

The Digital Economy Act is one of the final Acts of the present Parliament, and if you are interested in web technology and the knowledge economy, then it’s easily one of the most controversial.   Rather worryingly, despite the controversy,  it was rushed through during the so-called “wash-up” period without meaningful debate. 

Why the controversy?  Well the Act contains fairly vague powers to shut down web-sites and cut-off internet access. This post deals with the former.  I will blog about cutting off internet access later. 

 Under Section 17, the Secretary of State can put in place regulations permitting rights holders (effectively record companies, movie producers and newspapers) to obtain Court orders that require an Internet Service Provider (“ISP”) to shut down “locations on the internet which the court is satisfied has been, is being or is likely to be used for or in connection with an activity that infringes copyright”.  

Section 17 is currently so vaguely worded that you could make a case for its’ application to Google, YouTube, Facebook, or pretty much any other site .  Of course, its hard to say what this means in practice because the regulations, i.e. the detail,  have not been written yet.  

However, I suspect a lot of the “pain” will fall on ISPs. This is an increasing trend. 

Overall, one of the most concerning things about the Act (besides the drafting) is that it has exposed an apparent lack of expertise within government as to how web technology and the knowledge economy actually operates.  In a recent lapse, Stephen Timms, Minister for Digital Britain, referred to an IP address as an “Intellectual Property address”. Given the Act that Mr Timms has just helped to introduce, this is either deeply amusing or deeply concerning – probably both.  

I have discussed the law, but it’s another matter entirely as to whether websites can actually be blocked.   In my experience the people who run the sort of sites that the rights holders hate tend to be 2 steps ahead of the game. 

I will rant about the risk of my internet connection being throttled or cut in a couple of days.  

 


Twitter: @BrodiesTechBlog feed

 

April 2010
M T W T F S S
« Mar   May »
 1234
567891011
12131415161718
19202122232425
2627282930  

Follow

Get every new post delivered to your Inbox.

Join 135 other followers