The Information Commissioner Richard Thomas has called for greater use of the tougher penalties possible for those who breach data protection laws.
Thomas told delegates at the Infosecurity Europe that although criminal sentences to punish those who engage in the illegal trading of information have been introduced to the statute books, their implementation has frustratingly been delayed. "I'm still seeking serious deterrent to those who engage in this illegal market," he added.
He acknowledged that overall data protection awareness is improving, although public sector attitudes are still "worrying".
"The emphasis should be on accountability. Security is not just a matter for IT experts – the buck stops at the top and that has to be with the permanent secretaries," he said.
He branded the ICO's current powers "pathetic" and welcomed the forthcoming spot-check powers of organisations recently granted by the Prime Minister. Thomas added that a "modest increase in budget" for the ICO on top of the current annual sum of £10.5 million is also necessary.
He argued that although criminal sentences have been introduced to the statute books to punish those who illegally engage in the trading of information, their implementation has frustratingly been delayed. "I'm still seeking serious deterrent to those who engage in this illegal market," he added.
Lord Erroll, a member of the House of Lords science and technology select committee agreed that strong deterrents need to be introduced to "demotivate the next generation" from turning to online crime.
He added that public sector employees must also be carefully monitored to minimise the insider threat. "There are one or two rotten apples and we need the power to root them out," he argued. "Most of them are underpaid or under pressure and we need to make sure they aren't corrupted – that's why we need these [spot check] powers for the ICO soon.
Data minimisation was also held up as an important discipline which firms have been neglecting up until now. Thomas questioned the logic of allowing the details of 600,000 people to be stored unencrypted on a Ministry of Defence laptop for so long after they were obtained.
The idea of all-encompassing electronic ID schemes was setting off alarm bells as far back as 1970 21 Apr 2008
Self-appointed defenders of privacy should lay off Phorm and save their ire for the government 31 Mar 2008
ID schemes that fail to deliver real benefits in a way that users find convenient are unlikely to prosper 11 Apr 2008
Latest Symantec threat report finds a big increase in site specific attacks 08 Apr 2008
The Information Commissioner's Office has some strong advice for firms making data breaches 01 Apr 2008
Panel discussion highlights confusion, laxity and a lack of co-ordination 29 Apr 2009
Spot checks, greater fines and higher salary as data protection becomes paramount 24 Nov 2008
Information Commissioner writes to Department of Health demanding improvements in public sector's "worst offender" 27 May 2009
Experts predict more prosecutions to follow as watchdog cracks down on DPA breaches 06 Mar 2009
New Information Commissioner finally confirmed 14 May 2009
Survey of public sector IT managers reveals deep concern over ability to deliver on carbon-neutral targets 03 Jul 2009
Fresh funding will provide new wave energy research equipment and support research 03 Jul 2009
EPA hints it could soon raise efficiency bar for routers, modems and storage systems 03 Jul 2009
More news
From record-breaking solar panels to the International Renewable Energy Agency's new home, we round up the top stories from the past week 03 Jul 2009
Well, I hope they got a no win, no fee deal. I don't like being cynical (it's more of a congenital thing)... 03 Jul 2009
Recycling waste heat is nothing new, so why has the computer industry not kept up? 01 Jul 2009 More in-depth
Post your comment
Send an email to the Business Green editor at feedback@businessgreen.com
