New Enforcement Strategy launched by the UK OIC

The UK Information Commissioner has launched a new enforcement strategy (pdf), which will “take a practical down to earth approach – simplifying and making it easier for the
majority of organisations who seek to handle personal information well, and tougher for the minority who do not.” According to the strategy report, it is intended to ensure that personal information is properly protected and take necessary action to ensure that this is upheld.

The main forms of regulatory action include criminal prosecution, caution, enforcement notice, s 159 Order (notice of correction to the credit reference agency), application for an injunction/enforcement order and audit. It will be interesting to see how far this will go and whether organisations will take data protection laws more seriously. For further information, see the Information Commissioner's website.