3 ms·
The ICO was the direct result of the EU Data Protection Durectives of the 80s and are replicated throughout the Union, so I’m not sure they’re the best example
by tolien 9y ago
The ICO was the direct result of the EU Data Protection Durectives of the 80s and are replicated throughout the Union, so I’m not sure they’re the best example of the “oppressive regime” in the UK.
They’ve also been quite notably toothless, for example TalkTalk was fined a “record” £400k for their 2015 disaster: https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2016/10/talktalk-gets-record-400-000-fine-for-failing-to-prevent-october-2015-attack/ https://ico.org.uk/about-the-ico/news-and-events/news-and-bl...
- DanBC 9y agoPeople who responsibly disclose don't want fines applied, they want the bug to be fixed. ICO is one path to make that happen.
- tolien 9y agoThat’s true but if there’s very little penalty (continuing the example, TalkTalk made an after-tax profit of £72M [1] so the fine was 0.6% of that) for not fixing it, there isn’t much reason for an already-negligent business to care what the ICO say. https://www.talktalkgroup.com/dam/jcr:04037e42-6a6d-4fcf-9bea-8f339240d0ba/Annual%20Report%202015%20Final.pdf https://www.talktalkgroup.com/dam/jcr:04037e42-6a6d-4fcf-9be...
- rmc 9y agoThere are new Data Protection Regulations (GDPR) coming in soon on 25 May 2018, which will allow EU bodies to fine organisations up to 4% of their global revenue.