ICO publishes annual report covering an ‘unprecedented’ year

The public has woken up to the potential of their personal data, the Information Commissioner has said as the ICO’s annual report for 2018-19 was published today. Elizabeth Denham also said it covered an ‘unprecedented’ year for the regulator. Ms Denham continued: “The ICO has covered an enormous amount of ground over the last year – from the introduction of a new data protection law, to our calls to change the freedom of information law, from record-setting fines to a record number of people raising data protection concerns. “The biggest…

ICO statement: Intention to fine British Airways £183.39m under GDPR for data breach

Following an extensive investigation the ICO has issued a notice of its intention to fine British Airways £183.39M for infringements of the General Data Protection Regulation (GDPR). The proposed fine relates to a cyber incident notified to the ICO by British Airways in September 2018. This incident in part involved user traffic to the British Airways website being diverted to a fraudulent site. Through this false site, customer details were harvested by the attackers. Personal data of approximately 500,000 customers were compromised in this incident, which is believed to have…

Developing the ICO AI Auditing Framework: an update

Simon McDougall, Executive Director for Technology and Innovation reflects on the progress made in developing the ICO approach to auditing Artificial Intelligence (AI), and some of the broad themes emerging from the feedback received so far.  We launched this blog in March to provide regular updates on the development of the ICO Auditing Framework for AI, and encourage organisations to engage with us on this work. Since then we have set out the proposed overall structure of the framework, and explored the data protection challenges and possible controls in relation…

Gram Asia to Sell Telegram Tokens at Three Times ICO Price

South Korea’s Gram Asia is selling rights to its Gram holdings at $4.00 per token starting July 10, according to a report by Bloomberg on July 3. The proposed sale price is triple the original $1.33 sale price at Gram’s second initial coin offering (ICO) round in March 2018. The sale on July 10 is apparently happening exclusively through Japanese cryptocurrency exchange Liquid, as per its website. Liquid also hosted the Gram ICO in March, at which time Telegram raised $850 million, bringing its total valuation up to $1.7 billion. …

ICO searches Liverpool addresses as part of investigation into suspected illegal acquisition and sale of personal data

The Information Commissioner’s Office (ICO) has today (27 June) searched two addresses in Liverpool, as part of an ongoing investigation into the acquisition and sale of illegally obtained personal data. Following a six month investigation, working in partnership with the Insurance Fraud Bureau (IFB), two teams of ICO enforcement officers executed search warrants at a business and a residential address to seize computer equipment and documents which will be analysed for evidence. The business is suspected of carrying out high volumes of data farming activity, known as blagging or vishing,…

ICO fines telecoms company EE Limited for sending unlawful text messages

The ICO has fined telecoms company EE Limited £100,000 for sending over 2.5 million direct marketing messages to its customers, without consent. The messages, sent in early 2018, encouraged customers to access and use the ‘My EE’ app to manage their account and also to upgrade their phone; a second batch of messages was sent to customers who had not engaged with the first. During the ICO investigation EE stated the texts were sent as service messages and were therefore not covered by electronic marketing rules. However the ICO found the…

Statement on Eurofins Scientific | ICO

ICO Deputy Commissioner for Operations, James Dipple-Johnstone, said: “The ICO has received a report that Eurofins Scientific, which provides forensic and scientific services to a number of UK law enforcement agencies, has been subject to a data breach. “We are working with partners and other stakeholders, nationally and internationally, to establish the scale and extent of the incident and to ensure that the interests of UK citizens are protected. “At present the Luxembourg Data Protection Authority, Commission Nationale pour la Protection des Données (CNPD), is currently the lead data protection…

Blog: ICO Adtech update report published following industry engagement

20 June 2019 By Simon McDougall, Executive Director for Technology and Innovation In recent months we’ve been reviewing how personal data is used in real time bidding (RTB) in programmatic advertising, engaging with key stakeholders directly and via our fact-finding forum event to understand the views and concerns of those involved. Today we’re publishing our Update report into adtech and real time bidding which summarises our findings so far. We have focused on RTB due to its complexity, the risks it poses and the low level of data protection maturity…

ICO joins the UK Regulators Network

The ICO has joined the UK Regulators Network (UKRN) as a full member. Joining the network provides the ICO with the unique opportunity to gain valuable insights into the issues facing regulators across the UK, inform policy debates and share experience. Membership will also support the ICO engaging with the main UK regulators on specific issues including cyber security. James Dipple-Johnstone, Deputy Commissioner – Operations said: “The ICO is delighted to have joined the UKRN. We look forward to working with network colleagues by sharing knowledge and best practice and…

ICO fines home security company for making thousands of nuisance calls

The Information Commissioner’s Office (ICO) has fined Smart Home Protection Ltd £90,000 for making nuisance calls to people registered with the Telephone Preference Service (TPS). The Staffordshire company was behind 118,000 unlawful marketing calls made between January 2017 and September 2018 to people registered with the TPS. It is against the law to make marketing calls to numbers that have been registered with the TPS for more than 28 days, unless people have provided consent. The full penalty notice to Smart Home Protection Ltd can be read here. The ICO…