By Natasha Lomas, 8 August 2007 11:45
NEWS
The UK's data protection watchdog has warned that greater transparency about data collection is needed as more personal information is shared between different organisations.
The Information Commissioner's Office (ICO) has published new guidelines for individuals to better understand how and why organisations use their data under the current Data Protection Act.
silicon.com's Full Disclosure campaign - what we are asking for...
silicon.com wants the government to review its data protection legislation and improve the reporting of information security breaches in the public and private sectors.
We are calling for greater public debate and for the government to consider legislation that would require organisations that suffer information security breaches to alert their customers if there is a chance the breach has put individuals' sensitive personal data at risk.
We want to hear your views about this campaign and the issues it raises. Make your voice heard by leaving a Reader Comment below, emailing us at editorial@silicon.com or signing the 10 Downing Street e-petition.
People are not always aware of the extent to which their personal data can be shared by different organisations, according to the ICO - between, for instance, the police and a local authority.
Iain Bourne, head of data protection projects at the ICO, said in a statement: "More and more information is being shared about us, often for useful and wholly legitimate purposes. It is important that individuals are aware of their rights under the Data Protection Act."
Responding to the ICO's warning, Graham Hann, a technology partner at European law firm Taylor Wessing, said UK data protection laws "are not clearly interpreted in many areas" which can make it difficult for people to understand their rights. Wessing warned that although the general legal requirement is that companies cannot use individuals' data in ways they have not consented to, there are exceptions.
He said in a statement: "New laws brought in recently require that customers opt in to sharing of data for marketing purposes where the marketing would be by email. However not all organisations have caught up to speed with these laws and individuals may find their details being used by businesses wishing to sell them goods or services that they have no interest in receiving."
Businesses should be wary of buying data from third-party sources, he said, and be sure to verify they have legal right to use the data in the way they intend.
The law firm added that consumers' awareness of data protection issues has "risen dramatically in recent years".
The latest data warning from the data protection watchdog follows the launch of silicon.com's Full Disclosure campaign - which is aiming to persuade the UK government to change the law on data breaches so that companies have a legal requirement to inform individuals when their data has been put at risk by a security breach.
silicon.com has created an e-petition on the 10 Downing Street website calling for a change in the law - click here to sign the petition and make your voice heard on the issue of data security.
Comments
There are 3 comments. Join the discussion
1. Charles Smith
The ICO is a toothless sheep. When I previously raised a valid complaint on a data protection issue all that happened was them sending a woolly guidance leaflet. They are clearly not set up to be an effective data protection policing body.
Until the the ICO becomes more proactive it will be ignored.
2. James Button
No point knowing your rights unless they are enforced.
So the UK public 'joe' is on his own unless the (UK/EU) government does something to get both those who breach the data protection and associated acts. and those who should ensure compliance with it punished for the failure to comply.
Fine both the offending organisations, and individual management persons.
Second offence - restrict their ability to run companies or undertake activities involving 'personal information'
Third offence Imprision the offenders.
And that should also apply to the staff and management of organisations that are empowered to require, and/or enforce compliance.
As in fine the data protection registrar they complete salary, and then send them to prision for not doing what they are supposedly being paid taxpayers money to do.
3. anonymous
We also have to educate companies.
If I had a £1 for everytime a call-centre agent has refused to tell me what info they have about me for "data protection reasons" I'd be laughing.
They are supposed to protect my data from others, not from me...