This page contains video content. To view the video, you need to have javascript turned on and view the page using a Flash player. Install or update the Adobe Flash Player by using the button below.
Alternatively, you can view the video content in mpeg format:
Or download the text transcript:
Data Protection (DP) Enforcement
We know how to take managed risks
We take issues surrounding data protection and Privacy and Electronic Communications Regulations very seriously. A breach of the law can be devastating for individuals and leave their personal information exposed. So, our role is to decide when it is necessary to take formal enforcement action – and to what extent.
The majority of enforcement action is taken when other ICO teams have been unable to informally resolve a complaint from an individual. However we do intervene earlier if a serious matter comes to light via other routes, such as the media or where we are directly informed of a breach by a data controller. In particular we take action in cases where organisations have consistently failed to comply with their obligations, or where their failure to comply causes or has the potential to cause significant detriment to individuals.
Our decisions are guided by the principles contained within the Commissioner's Regulatory Action Strategy. And we have the power to take serious action through prosecutions, fines and 'stop now' orders. One of the largest teams in the ICO, our work can be very high profile and we are busier than ever as we investigate more cases than ever before.
Roles in data protection enforcement
Based in Wilmslow our Head of Enforcement and Investigations is supported by a team of Enforcement Managers, Enforcement Officers and an Investigations Manager.
Our people were involved in every aspect of this high profile case study of The Consulting Association.
