IT Governance Blog on IT governance, risk management, compliance and information security.

• Reports are being investigated of a major credit card scam in Spain;
• Two suspected computer hackers have been arrested in Manchester in a major inquiry into a global internet scam designed to steal personal details;
• The personal details of 817 E.On customers have been disclosed in error.;
• T-Mobile staff sold personal data.

These are just a few headlines from the press this week!

The Information Commissioner, Christopher Graham, is highlighting new evidence which shows that a deterrent custodial sentence is required to stop the trade in unlawful personal information. Christopher Graham is responding to the government’s proposal to introduce a custodial sentence for breaches of Section 55 of the Data Protection Act from 1 April 2010.

Christopher Graham, said “…The existing paltry fines for Section 55 offences are simply not enough to deter people from engaging in this lucrative criminal activity. The threat of jail, not fines, will prove a stronger deterrent.”

“This will not only underline the serious nature of the offence but will ensure that
those convicted carry a meaningful criminal record. A custodial sentence will also
have the added benefit of making the section 55 offence a recordable one and open
up the possibility of extradition in appropriate cases.”

Comply with the DPA or face Jail!

It’s likely that a custodial sentence will only be dished out for the most extreme cases of trade in unlawful personal information, but it will certainly make top executives sit-up and take notice.

As reporting of data breaches become more mainstream by the media, consumers are becoming extremely cautious and protective of their personal information, and rightly so.

Organisations who demonstrate good security practices will have a competetive advantage!

As consumers become more savvy about who they give their personal information to, information security will become an increasingly important factor in the product/service purchase decisions process!

To find out where your orginisation is in relation to DPA compliance use our DPA Compliance Assessment Tool. You can then take the appropriate action necessary to fill any gaps!