Changes in data protection, old and new, catch the attention of Paul Gershlick
From Paul Gershlick
10 years ago, I predicted: ‘I expect there to be a growing clamour for better tools available to the Information Commissioner's Office in three areas: unannounced audits, fines for serious data breaches, and prison sentences for unauthorised obtaining of personal data’. 10 years on, we are about to see the introduction of updated data protection laws, with the potential for eye-watering fines really having grabbed the attention of all sizes of organisation. This year, somewhat ironically, I make a boring prediction that although the level of fines issued will increase from now, the ICO will be slow to dish out the really huge ones that people are fearing, particularly when organisations look to do things right but have slipped up. However, the public naming and shaming will continue, and I also expect that we will see a renewed call for criminal sanctions against individuals who deliberately use personal data in ways that had not been intended.
Paul Gershlick is a Partner at Veale Wasbrough Vizards LLP