Feeds

Lords defy Government by proposing criminalisation of data rogues

Disclose our info and you'll pay

Top 5 reasons to deploy VMware with Tegile

The House of Lords has proposed making it a criminal offence to disclose personal information intentionally or recklessly. The Lords passed an amendment to the Criminal Justice and Immigration Bill, defeating the Government.

If it is to become law the amendment will need to be approved by MPs in the House of Commons. The Government opposed the amendment but was defeated by 134 votes to 130.

The amendment would make it a criminal offence to "intentionally or recklessly disclose information contained in personal data to another person, repeatedly and negligently allow information to be contained in personal data to be disclosed, or intentionally or recklessly fail to comply with [their] duties".

"Data controllers currently do not face anything like adequate sanctions if they intentionally or recklessly disclose information, or indeed are repeatedly negligent," said Liberal Democrat peer Baroness Miller of Chilthorne Domer, introducing the amendment.

"Goodness knows, this is not exactly a new issue. The Government have had time to address it. In 2002 in another place [the House of Commons] my honourable friend Paul Burstow revealed that a total of 1,354 government-owned computers had gone missing over the previous five years, while much more recently, as noble Lords will be aware, vast amounts of data, whether from Her Majesty’s Revenue and Customs or the health sector, have been lost," she said.

"The issue has been around for a long time, and not only in government sectors. The private sector, as we know, can be negligent, and it can do all sorts of things with data that it should not do. Both the public and private sectors need to be covered by further sanctions, which is the reason for our amendment," said Miller.

Until recently the bill contained a clause that would introduce jail sentences of up to two years for people who steal or sell personal data, but the Government has decided not to activate that clause of the law.

The new amendment would create a new offence, but Government minister Lord Hunt of Kings Heath opposed the change, saying that the Government wanted to wait until it had reviewed past problems with data loss before legislating.

"The Government are involved in a number of reviews on these matters in the light of some of the well publicised incidents that have taken place," he said. "Just as noble Lords usually say that the legislation I bring forward is premature and has not had enough consideration, I have to say that that is our position at the moment."

"The Government recognise the genuine and legitimate concerns expressed by noble Lords both in this debate and in Committee, but a number of imminent reviews and reports will inform both the actions that the Government have to take as a Government and whether legislative changes should be made. That is why we think it would be premature to legislate at this point," he said.

Miller said that the public could not afford a wait. "Basically the public will have to continue with this lack of protection for at least another year or two, during which time, at the rate of the past 12 months, millions more pieces of data will have gone missing," she said.

The Conservative Party proposed a weaker amendment which would only apply to public bodies or workers on contract to the public sector, but Miller said that it was a false distinction. "Citizens do not mind who lost the data; it is irrelevant to them. What is important is that it is their data that have been sold, lost or left on rubbish heaps and it is they who are affected by it," she said.

The Information Commissioner Richard Thomas has previously called for a law that would punish people or organisations that put other people's personal data at risk. In January the Parliamentary Justice Committee backed Thomas's calls for such a law.

Copyright © 2008, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

Beginner's guide to SSL certificates

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
In the next four weeks, 100 people will decide the future of the web
While America tucks into Thanksgiving turkey, the world will be taking over the net
Microsoft EU warns: If you have ties to the US, Feds can get your data
European corps can't afford to get complacent while American Big Biz battles Uncle Sam
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.