ACPO encourage the sending of identity documents over insecure connection
ACPO – the Association of Chief Police Officers – are inviting people to send online data protection subject access request including copies of proof of identity, such as passports or bank statements...
View ArticleACPO: contractor’s error, or data controller’s liability?
I blogged a week or so ago about the worrying fact that the Association of Chief Police Officers (ACPO) were encouraging people to send sensitive personal data over an unsecure HTTP connection. a...
View ArticleCarphone Warehouse and the DPA risks
According to my less-than-reliable memory, I once purchased a mobile phone from Carphone Warehouse about twelve years ago. I seem to also remember buying a phone from a company with a name like...
View ArticleThis old world will never change
Complacency about data protection in the NHS won’t change unless ICO takes firm action Back in September 2016 I spoke to Vice’s Motherboard, about reports that various NHS bodies were still running...
View ArticleA royal letter before claim
Media reports suggest a USB stick from Heathrow Airport containing security information, including details of measures used to protect the Queen has been found on a street Letter before small claims...
View ArticleSchrems II – what now?
A piece I have written with my Mishcon colleague Adam Rose, looking at the issues for businesses involved in international transfers (esp. to the US). Make no mistake – the effect of Schrems II is to...
View ArticleP@55w0rdz
A guest post by Danny Budzak. Danny is the Senior Information Manager at the London Legacy Development Corporation and is involved in data protection and information security. He regularly delivers...
View ArticleOne third of personal data breaches reported “late” to ICO
By me, on the Mishcon de Reya website. …a recent request to the ICO under the Freedom of Information Act 2000 (FOIA) has revealed that, from the available data, of the 21705 personal data breaches...
View ArticleSNP MP private email hack
UPDATE 13.02.23: it’s been drawn to my attention that Mr McDonald says that his private account is “not used for constituency or parliamentary business” END UPDATE It was reported last week that the...
View ArticleThe demise of portmanteau data breach claims
Many defendants in data protection proceedings will have experienced claims which also plead a misuse of private information (MPI). Often, on the face of things, the latter appears to add nothing to...
View Article