Category: Other Information Law

Mrs Thatcher’s data protection legacy

Successive UK Governments have seen data protection more as a cost overhead to be minimised rather than as an essential protection for the individual in an electronic age. This view started with Mrs Thatcher’s first Government and has endured for over three decades. During the 1970s, there were a number of White Papers and Reports starting with the Younger Report on Privacy (in 1972) and ending with the Lindop’s Report on Data Protection (December 1978). So when Mrs Thatcher came

Read article

Simple extension of ICO’s NHS audit powers are needed. Do you agree?

Just a brief blog about the proposals to extend the ICO’s audit powers to NHS bodies and how improved protection for data subjects can be obtained at minimal cost. Amberhawk argues that if “unannounced” NHS data protection audits are to occur, then such audits should be extended to any department of a data controller who obtains health personal data from the NHS (e.g. research organisations; Local Authority Social Work Department). This will enhance the protection for data subjects. In our view,

Read article

Data collected by Google’s drones is compliant with European privacy/data protection law

Buried in three of the 250,000 diplomatic cables published two years ago by Wikileaks was an obscure reference to a curious purchase made by Google from the Pentagon. These cables record that Google has contracted to buy all surplus surveillance drones as the USA military withdraws from Afghanistan and Iraq. These drones have been used to develop Google’s controversial StreetView service. Google’s idea is to have a drone electronically follow each StreetView CCTV camera car at a height of 50

Read article

Local Government likely to follow NHS down the mandatory data protection audit road

I am going to make a simple prediction; within 19 months  Local Authorities will be subject to compulsory data protection audit. Why do I think that? Well I  think it is obvious if one reads the MoJ’s consultation document that argues that the ICO should have the power to audit NHS data controllers on demand. For instance, if you consider a “complaint” to the ICO as a possible data protection compliance issue, then the following Table shows that Local Government

Read article

Could a Conservative Party lead by Theresa May drop the Data Protection Act?

Last week, Home Secretary Theresa May made a speech that could fundamentally alter the Conservative Party’s approach to human rights. The Party's currently policy position is that it would like to replace the Human Rights Act 1998 with its own Bill or Rights, but it would not derogate from the European Convention of Human Rights. Theresa May has put that all in doubt. In her speech, she said: “…And we need to stop human rights legislation interfering with our ability to

Read article

Could the Conservative Party’s electoral database breach the Data Protection Act?

Ever since the Scottish National Party breached the PECR Regulations back in 2005, all political parties have had problems using personal data to identify potential supporters at election time. It is a tricky issue; those standing for election need to process personal data in order to contact supporters and voters. Last Sunday, it emerged that the Conservative Party appears to have used USA-style polling techniques to create a database of voters which, in part, is legitimised by a simple privacy

Read article

Data Protection Code of Practice for the Press raises the prospect of enhanced protection for ordinary data subjects.

Five days ago, the Conservatives outlined their plans for implementing the Leveson Recommendations (the “Recommendations”) by creating an independent panel, established by Royal Charter, to verify that any new press regulator is effective. Yesterday, the Information Commissioner put a spanner in these works; he has published outline plans for his own voluntary Code of Practice and is consulting on its possible content. This blog explains why an ICO Code of Practice, if eventually published, could help aggrieved data subjects, and

Read article

Question answered: “Why does the European Commission think the UK’s Data Protection Act is a deficient implementation of Directive 95/46/EC?”.

Whilst preparing for “my day in Court”, I have realised that I also have had, for over a year, some further detail which explains why the European Commission thinks the UK’s Data Protection Act 1998 (DPA) is a deficient implementation of Directive 95/46/EC. I think I have the answer and this extra detail is the subject of this blog. Next Monday (11th Feb), I have my Tribunal hearing as to whether I can obtain the full text of the letters sent by

Read article

EU Study calls for better privacy protection in the Cloud and more transparency re USA’s surveillance laws

Happy Data Protection Day. What better time for the European Parliament to publish a report that calls for more "legal certainty in jurisdiction-spanning transfers of data involving a multiplicity of data controllers and processors” and for the Safe Harbor Agreement to be extended to Cloud Service providers based in the USA. In a passage that will get all the headlines, the Report also calls for more transparency in relation to how law enforcement agencies in third countries (but in particular the USA) will use

Read article

Cameron’s speech puts UK accession to any Data Protection Regulation and Directive in doubt.

In yesterday’s speech on the relationship between the UK and the Europe Union, the Prime Minister has raised doubts as to whether the UK will adopt both the proposed Data Protection Regulation and the Data Protection Directive in the field of law enforcement. Reading the runes: if the Conservatives win the next General Election, I think that implementation of both Regulation and Directive is unlikely. Why am I saying this? First, the Conservatives are going to consult business about the EU Regulations

Read article
Search Hawktalk blogs by month :
Select Date
View blogs by category:
Hawktalk Taxonomy