• silicon.com
• Technology
• Security

By Sonya Rabbitte, 27 July 2000 00:20

NEWS Just one week after the Powergen security scandal, UK website owners are to get a set of guidelines from the Data Protection Commissioner (DPC) which govern their use of consumer data. According to the DPC, companies in the UK are still unsure what their obligations are regarding online consumer privacy protection. The industry itself is concerned that the Data Protection Act does not adequately cover online information. The guidelines, due to be published in September, will cover online privacy policies, the use of cookies, and the legalities of buying consumer information. According to the DPC the guidelines will take into account queries and feedback from the industry, and should simply privacy issues for both consumers and companies. David Smith, assistant registrar with the DPC, told silicon.com that it does not plan to establish its own standards body, but hopes that the guidelines will be incorporated by other watchdog bodies into their quality kitemark schemes. While the guidelines are not legally binding, Smith said that the DPC would investigate complaints against websites that did not comply with them. According to Simon Davies, director general of Privacy International, the move is a step in the right direction, but will only be effective if it is integrated into a global internet system that moves away from voluntary registration and offers the customer real legal redress. He said: "There is nothing progressive about a voluntary system. It has important symbolism but minimal value and customers need genuine legal remedies, not just high sounding principles. "All websites should be obliged to print principles on the website and if they breach them, they should be sued in a court of law," he added.