The government has failed to meet its own deadlines to bring in new powers for the Information Commissioner's Office (ICO) to fine companies who lose personal data.

The Ministry of Justice won't say when it plans to publish the secondary legislation needed to set the fines or why it did not meet its March target.

"We are committed to bringing these provisions into force as soon as possible."

Changes to the Data Protection Act were proposed following a rash of high profile data losses by the government and private companies in 2007. The ICO lobbied for the power to impose civil penalties on those who fail to protect privacy.

Most of its European counterpart data watchdogs have similar powers.

An ICO spokeswoman said it had submitted to the Ministy of Justice's consultation on the powers, and was awaiting the outcome.

This week the security industry called on the government to publish its plans. Data protection specialist FutureSoft said it understood officials were set a target to implement a civil penalties regime by the summer parliamentary recess "at the latest", but noted "there is, as yet, no sign of the statutory guidance". ®

Related stories

• Manchester council caned over school data breach (23 June 2009)
• Insurance giant rapped on knuckles over DPA breach (10 June 2009)
• ICO voices concern over creaking data protection law (13 May 2009)
• Plan to publish court sentences launches in farce (29 April 2009)
• Updated Street View nod prompts call for privacy watchdog reform (24 April 2009)
• Her Majesty's CIO braces US for Obama HIT (24 April 2009)
• One third of workers open to bribes for data theft (22 April 2009)
• London health authority put on notice over data breach (24 March 2009)
• Coroners & Justice Bill chewed a new one by opposition (16 March 2009)
• UK's privacy watchdog not very bitey (12 March 2009)
• Comment Straw bends on Coroners & Justice data-sharing proposals (9 March 2009)
• ICO strengthens criticism of Government data sharing (19 February 2009)