First fine issued under new data protection regime

TiredSam · Dec 20, 2019

In the first use of fining powers under the General Data Protection Regulation (GDPR), the Information Commissioner’s Office (ICO) has fined a London pharmacy £275,000 for failing to ensure the security of special category data.
Click to expand...

Steve Eckersley, ICO director of investigations, said: 'The careless way Doorstep Dispensaree stored special category data failed to protect it from accidental damage or loss. This falls short of what the law expects and it falls short of what people expect.’

The administrative fine was imposed under S.155 of the Data Protection Act 2018, which implements the GDPR. In setting the fine, the ICO considered the contravention only from 25 May 2018, when the GDPR came into effect.

Commenting on the penalty, Jon Baines, data protection specialist at London firm Mishcon de Reya, said: 'All organisations should read the penalty notice carefully – it will contain much to guide them on what bad practice looks like, and how it might result in a hefty fine.'
Click to expand...

https://www.lawgazette.co.uk/law/fi...adjourned+to+April+|+Mother+in+Law_12/20/2019

I wonder how excuses about unlocked drawers and gremlins would fare now?

Log in or Sign up

First fine issued under new data protection regime

TiredSam Committee Member

Share This Page

Log in or Sign up

First fine issued under new data protection regime

TiredSam Committee Member

Share This Page

Useful Searches