The ICO is consulting on an application to be given investigative and other powers under the Proceeds of Crime Act 2002 to close potential gap between civil and criminal fines
The Information Commissioner is consulting on being granted access to investigation and other associated powers under the Proceeds of Crime Act 2002 (POCA).
Personal data has a monetary value and is increasingly being recognised and treated as a commodity which is stolen and traded for financial gain. It is an asset exploited by criminal gangs, which can lead to significant financial losses and illegal monetary gains.
The GDPR has introduced increased financial penalties for civil breaches of the Data Protection Act 2018. Criminal offences under the DPA 2018 are now recordable. However, the only sanction available to the courts following a criminal conviction is a fine, which in some cases will be much less than the financial gains made by the offender. The ICO says that this will inevitably lead to a greater disparity between the deterrent and punitive effects of sanctions imposed in relation to civil breaches and criminal offences.
The courts can make POCA confiscation orders against convicted individuals for payment to the state of an equivalent value to their benefit from crime. POCA investigation and other associated powers would enable the ICO to assist the court to identify assets and to determine the value of a criminal’s proceeds from crime.
The ICO previously worked in partnership with other agencies which conducted financial investigations on its behalf and assisted the courts with these cases. To date the ICO has prosecuted and convicted a number of individuals who were later stripped of assets by the courts using POCA confiscation powers. However, these partner agencies are no longer able to provide assistance to the ICO.
There has been significant growth in the number of cases involving financial gain and if the ICO is not granted powers under POCA, an ever-increasing number of offenders will be able to retain what can amount to significant criminal proceeds. In some cases these gains can illegally fund lavish lifestyles.
POCA provides financial investigation powers to Accredited Financial Investigators (AFI). To have access to the POCA powers, AFIs must currently be a member of staff of a public body, designation by order by the Secretary of State, and trained and accredited by the National Crime Agency. It is proposed there will be one AFI based within the ICO’s Investigations Department who will consider asset recovery in all cases where offenders have benefited from criminal conduct.
The Information Commissioner is seeking powers relating to :
- applications to the court for Restraint Orders (under Part 2 of POCA);
- applications to the court for Confiscation Orders (under Part 2 of POCA);
- cash seizure, detention and forfeiture from premises (under Part 5, Chapter 3 of POCA);
- asset seizure and forfeiture from premises (under Part 5, Chapter 3A of POCA);
- investigations (including search and seizure warrants) to support the proceedings sought above (under Part 8 of POCA); and
- access to information relevant to the investigation of money laundering offences.
The ICO is also seeking relevant authorisation powers that will enable it to exercise the powers referred to above.
The powers sought will enable the ICO to undertake confiscation investigations and apply to the court for restraint of any asset or realisable property when there is evidence to show that a defendant in criminal proceedings has benefited from their conduct.
The powers sought in relation to seizure and forfeiture of cash and assets will enable the ICO to investigate and recover items that are derived from or intended for the use in criminal conduct.
Access to information relevant to the investigation of money laundering offences is being sought to enable the ICO to respond to the changing nature of criminal activity involving the misuse of personal data, and to engage with other law enforcement agencies more effectively in cases which may involve offences of money laundering.
Where applicable, the ICO is seeking the equivalent powers in Northern Ireland.
The consultation ends on 6 December 2019.