2011-07-12

By staff reporter

Businesses should be more willing to undergo data protection audits, the Information Commissioner, Christopher Graham has said. The warning comes as figures published in the ICO’s annual report show that private companies reported the most data security breaches of any sector in 2010/11.

A data security breach is an incident that results in the loss, release or corruption of personal data. In the absence of a legal obligation on data controllers to report them, the Information Commissioner operates a voluntary scheme under which serious breaches are brought to his office’s attention.

Figures from the annual report show that of the 603 data security breaches reported to the ICO in 2010/11, 186 – almost a third – occurred in the private sector. Despite this, just 19% of businesses contacted by the ICO accepted the offer to undergo free data protection audits. In contrast, 71% of public sector organisations who were contacted voluntarily agreed to be audited.

Information Commissioner, Christopher Graham, said: “Lenders, general businesses and direct marketing companies account for almost a third of total complaints to the ICO, and businesses were the top sector for reporting data security breaches to us last year. Despite this, many of them are still resisting our offer to undergo audits. We’ve written to organisations we consider to be high risk but the response has been disappointing.

“These audits are not about naming and shaming those who are getting it wrong. The fact that a company has undergone a consensual audit should count as a badge of honour, showing that the business takes data security seriously. After all, sound data protection practices are irrevocably linked to providing good customer service.”

Home     More News


Other stories you may find of interest:

PwC: Cyber security industry 'in freefall'
Despite the growing threat of cyber attack, business and government is continue to ignore the risks, allowing attackers to exploit a myriad opportunities, PwC warns.

ISACA: Geolocation risks misunderstood
A new ISACA report cautions that regulating the use of geolocation data is still in its infancy, and that users should be aware of the information they are sharing.

PwC: Rising security breaches cost UK billions in the last year
The overall cost of security breaches to business is now billions of pounds a year, a new survey shows. According to the Information Security Breaches Survey by PwC in conjunction with Infosecurity Europe, in the last year, one in seven large organisations has detected hackers within their systems – the highest level ever recorded since the survey started in the early 1990s.