The ICO Sandbox has selected three innovative data sharing services aimed at helping those who are vulnerable to online gambling harms, supporting ex-service men and women get the care they need, and a platform to help fight against cyber-criminals.
The projects proposed by the Gambling Commission, by CDD Services and by Global Cyber Alliance demonstrate how data sharing can help deliver efficient services that support our communities, while protecting people’s privacy.
Now in its third year, the ICO Sandbox is a free service designed to help organisations to explore new ways of using personal data, while ensuring that appropriate protections and safeguards are in place. The Sandbox is currently focussing on projects that support complex data sharing in the public interest.
Anulka Clarke, ICO Acting Director of Regulatory Assurance, said: “Data protection law enables organisations and businesses to share personal data securely, fairly and proportionately. Our regulatory sandbox helps organisations put data protection at the heart of their projects so people’s information is protected when used and shared.”
The ICO has recently published a new Data Sharing Code of Practice and developed a suite of new resources, providing practical advice to businesses and organisations on how to carry out responsible data sharing.
Projects
Gambling Commission
Whilst many people enjoy gambling without experiencing harm there is clear evidence this is not the case for all. As technology develops within the online space it has become apparent that new opportunities are emerging to significantly enhance protections for the public and players from gambling-related harm. A major opportunity has been identified by the Gambling Commission in the form of the development of a Single Customer View (SCV) for online players. The SCV will allow data which already exists around player behaviours to be aggregated in a safe, controlled manner to drive better decision making, actions and evaluation around player protection across all online gambling providers. The Commission recognises there is risk around any new form of data use and so is working with the ICO to ensure the SCV is delivered in a way which puts data security and the interests of the public and players as the absolute priority throughout.
Global Cyber Alliance
The Global Cyber Alliance (GCA) have entered the Sandbox to explore the possible next steps in developing their DomainTrust concept and the potential benefits of processing personal data in the platform to help fight against cyber-criminals. DomainTrust is an intelligence platform that provides registries, registrars, and cyber protection agencies with high quality, large-scale sets of data on suspected malicious and criminal domains being used in phishing attempts, malware distribution, and command and control (C2) activities. This data provides intelligence upon which they can take further action: investigation, suspension, or disablement.
CDD Services
SafeGuarden technology from CDD Services is redefining digital compliance by giving individuals control of their personal data. With increasing digital exposure, communities of people depend on a safe space to connect and communicate with a variety of stakeholders – from carers and support staff to friends and colleagues. These communities rely on, and expect, data privacy and security.
Hull4Heroes is a veteran charity, supporting ex-service men and women and their families. The codeless SafeGuarden platform is a dynamic xRM with a suite of configurable apps and digital tools to help individuals connect in a safe, simple and secure way. The platform is being piloted to support the Veteran’s Village project, and aims to be socially inclusive and useful, protect individual rights, and allow individuals, organisations and communities to work together as one.
SafeGuarden will enable personal data exchange and real-time consent control, allowing support givers to focus on those in need, accelerating onboarding and simplifying multi-agency referral and monitoring of individuals within their best interests.
Successfully being accepted into the Sandbox will enable CDD Services to work directly with the ICO to ensure that data protection by design is embedded in the platform and its data sharing processes, safeguarding identity management, security and privacy.
For more information on the ICO Sandbox visit ico.org.uk/sandbox.
Notes to Editors
- The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and information rights law, upholding information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
- The ICO has specific responsibilities set out in the Data Protection Act 2018 (DPA2018), the UK General Data Protection Regulation (UK GDPR), the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR) and Privacy and Electronic Communications Regulations 2003 (PECR).
- The establishment of a regulatory sandbox was a goal outlined in the ICO’s Technology Strategy 2018-21.
- The ICO introduced the beta ICO Sandbox in 2019 and ten organisations have so far taken part. You can read the complete reports here.
- To report a concern to the ICO go to ico.org.uk/concerns.
