'Horrifying' security lapses are far too common

The UK's privacy watchdog has slammed bosses of large companies for not taking security seriously.

Richard Thomas, the UK information commissioner this week called on chief executives to wake up to security.

"The roll call of banks, retailers, government departments, public bodies and other organisations which have admitted serious security lapses is frankly horrifying," Thomas wrote in a report.

"How can laptops holding details of customer accounts be used away from the office without strong encryption? How can millions of store card transactions fall into the wrong hands?"

The Information Commissioner's Office (ICO) received almost 24,000 inquiries and complaints concerning personal information, and it prosecuted 16 individuals and organisations in the past 12 months, according to its annual report for 2006 and 2007.

"My message to those at the top of organisations is to respect the privacy of individuals and the integrity of the information held about them, to embrace data protection positively, and to be sure you are not the business or political leader who failed to take information rights seriously," Thomas said.

The ICO received complaints under both the Data Protection Act and the Freedom of Information Act.

More than half of Data Protection Act cases required the ICO to simply provide advice and guidance, while a breach was likely to have happened in more than a third of cases, of which a further 77 percent resulted in remedial actions such as correcting an individual's record or training staff.

The ICO received almost 6,000 complaints under the Freedom of Information Act and has closed more than three-fourths of those.

Public awareness of data protection rights has increased to 82 percent, with more people understanding that personal information must be handled appropriately, according to the report.

The information commissioner's plea follows a number of security breaches over the last year, including 12 UK banks found to be in breach of the Data Protection Act, following complaints about the disposal of customer information.

UK bank Barclays is facing an ICO investigation over allegations of customer privacy breaches, and telecommunications provider Orange and retailer Littlewoods were also found to be in breach of the Data Protection Act by the ICO this year.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • Array Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • More blogs »

Tags

Back to top

Featured