Category: Data Protection

European Commission explains why UK’s Data Protection Act is deficient

 The European Commission has released details as to why it sees the UK Data Protection Act as an improper implementation of Directive 95/46/EC, so much so, that it is considering infraction proceedings. Correspondence between the Commission and the UK Government has been exchanged, and despite the possibility of litigation, very little has been published or explained to MPs or MEPs. Hence the “liberation” of information from the Commission about these infraction proceedings is very timely. It is also the

Read article

Protection of Freedoms Bill promotes efficient CCTV surveillance not effective privacy

The hype surrounding the CCTV/ANPR provisions in the Protection of Freedoms Bill is misplaced. In fact, I would argue the Bill’s provision for a Statutory Code of Practice in the CCTV area represents little change on the privacy front, but a huge change in the potential for enhanced surveillance. A statutory code of practice covering CCTV/ANPR is to be produced by the Home Secretary and regulated by a new “Surveillance Camera Commissioner”. The Code’s application is limited to policing bodies

Read article

Ignored notification requirements cast doubt about Sensitive Personal Data

Directives often contain a notification provision which place each Member State under an obligation to report certain activities to the European Commission. Following a FOI request to the Commission, it has emerged that the UK Government has ignored its notification obligations in relation to the Data Protection Directive; this raises the general question of whether notification requirements in Directives are effective. With respect to the processing of sensitive personal data without the consent of the individual concerned  (e.g. processing details

Read article

Why the PNR Directive is disproportionate and does not protect privacy

Last week the European Commission unveiled its proposal for a Directive that allows for the interchange of Passenger Name Records (PNR) relating to all air travellers flying internationally within the European Union. Surprisingly, the drafting of the Directive reveals that it is disproportionate! When you first look at the Directive, with its emphasis on the use of PNR records in relation to “terrorist offences” or “serious transnational crime”, the first response is: “that’s OK with me”. Even when there is

Read article

How the Information Commissioner would improve Data Protection law

Last Friday, data protection day, was commemorated with a meeting organised by the Ministry of Justice in Whitehall. At that meeting, David Smith, the Deputy Information Commissioner (“D. I. C.”), reviewed the Information Commissioner’s wish list of changes to data protection law. This blog reports on the content of that list. Regulation or new Directive Speaking to “very well informed sources” at a break in the meeting it became clear that the UK Government wants the changes to data protection

Read article

Clues to the content of a new Data Protection Directive

What does future legislation in the field of privacy and data protection look like? An idea can be garnered by looking at the common ground between privacy advocates such as Privacy International (PI), academic groupings such as Cyberspace Law & Policy Centre at the Faculty of Law of the University of New South Wales (CLPC), and Regulators such as the Information Commissioner (ICO) and the European Data Protection Supervisor (EDPS). All these groupings want a definition of personal data that

Read article

Absence of custodial data protection offence increases likely use of “Malfeasance in Public Office”.

If you are employed in the public sector forget about offences under the Data Protection Act if there is deliberate misuse of personal data. In the absence of a custodial sentence, in more serious cases prosecutors are increasingly opting for the blunt instrument that is the common law offence of 'malfeasance in public office'. The offence does not need "personal data" or a computer or even an official secret – all it needs is a public official to be caught

Read article

Do privacy laws require prior notification of the publication of personal data?

Yesterday, the final salvoes in the protracted legal battle over the tabloid exposure of Max Mosely’s romp with five prostitutes were fired at the Human Rights Court in Strasbourg. The outcome will determine whether there is a structural failure in the UK law which will be corrected if the press have to notify an individual under investigation, if details about that individual are about to appear on the front pages. This Blog reports on some of the arguments raised by

Read article

Privacy issues: Smart Metering, Violent Warning Markers and Undertakings

Happy New Year. Isn’t it horrid to be back at work? Normally the end of year holiday is very quiet – not so this year, so I have taken the opportunity to report on three issues that could have been easily missed since my last blog. The commentary deals with Smart Meters, Violent Warning Markers and Undertakings. Full references at end as usual. Smart Metering With the UK’s Government blessing, most public utilities are moving to “smart metering”.  For instance,

Read article

As GCHQ keeps tabs on FOI requestors, what does “national security” mean?

Following an FOI request instigated by yours truly, it has emerged that GCHQ are keeping tabs on FOI requestors. Even those requestors who have asked public authorities for a copy of GCHQ’s widely distributed, declassified, IT security documentation. The circumstances of my request illustrates why the FOIA exemption (Section 23) pertaining “national security” is ridiculously wide, and raises questions as to what “national security” now means. The information that was the object of my desires is sexily entitled: “HMG IA

Read article
Search Hawktalk blogs by month :
Select Date
View blogs by category:
Hawktalk Taxonomy