From Paul Gershlick
10 years ago, I predicted: ‘I expect there to be a growing
clamour for better tools available to the Information Commissioner’s Office in
three areas: unannounced audits, fines for serious data breaches, and prison
sentences for unauthorised obtaining of personal data’. 10 years on, we are
about to see the introduction of updated data protection laws, with the
potential for eye-watering fines really having grabbed the attention of all
sizes of organisation. This year, somewhat ironically, I make a boring
prediction that although the level of fines issued will increase from now, the
ICO will be slow to dish out the really huge ones that people are fearing,
particularly when organisations look to do things right but have slipped up.
However, the public naming and shaming will continue, and I also expect that we
will see a renewed call for criminal sanctions against individuals who
deliberately use personal data in ways that had not been intended.
Paul
Gershlick is a Partner at Veale Wasbrough Vizards LLP
