Feeds

Expert: UK would break its own rules with web-snoop law

Hello there, Data Protection Act

Security for virtualized datacentres

How a data exemption would work

The DPA contains an exemption which states that personal data can be processed for the purposes of the prevention or detection of crime without having to inform individuals if informing the individuals would jeopardise the ability to prevent or detect crime.

Wynn said organisations involved in any new data sharing initiative should conduct a privacy impact assessment (PIA) prior to entering such a scheme as one means of safeguarding individuals' right to privacy.

"A thorough PIA would identify only the data that was necessary for the specific purposes of the scheme was processed," she said. "While it is one thing to make it more convenient to share personal information it should not be at the cost of privacy so the PIA would allow the bodies to balance those interest and allow them to identify the least intrusive way of sharing data."

Where practical, organisations involved in any new personal data sharing scheme should anonymise the personal data (so that individuals are no longer identifiable) prior to the information being made available through the scheme, Wynn said. Alternatively government departments and public bodies could anonymise or pseudonymise data they obtain from other organisations involved in the initiative, she said.

"In terms of any new legislation the devil will be in the detail, but it could be that it cuts across the fundamental principles of the DPA. However, if the privacy safeguards are robust it may result in only minor changes to the existing law. In any case data-sharers would have to consider the draft European Data Protection Regulation which seeks to enhance data subjects' rights. Government should encourage organisations to liaise with the Information Commissioner's Office (ICO) to allow it to audit any data sharing processes as this would demonstrate their commitment to privacy publically and show that the rights of the individual are considered to be a priority."

According to guidance issued by the UK's data protection watchdog last May, organisations must establish whether it is justified to share information in the first place and ensure that only the information required to achieve the objective of the sharing is disclosed.

The ICO's guidance advises organisations to employ 'need to know' principles to restrict access to personal data they hold, and assess whether a data sharing arrangement needs to be ongoing or on a one-off basis. Common rules should be established for how data is shared to make sure it is secure, and reviews of the processes should be made, it said.

"We are aware that the Cabinet Office is developing proposals to enable greater data sharing across government and the public sector," the ICO said in a statement. "We look forward to commenting on these proposals when they are published.

“In the meantime we continue to advise bodies involved in data sharing on how they can comply with the Data Protection Act. This includes explaining the privacy safeguards that must be in place. We have published a statutory code of practice on Data Sharing and will continue to work closely with central government and associated stakeholders to ensure that individuals’ information rights are protected.”

Copyright © 2012, Out-Law.com

Out-Law.com is part of international law firm Pinsent Masons.

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
JINGS! Microsoft Bing called Scots indyref RIGHT!
Redmond sporran metrics get one in the ten ring
Driving with an Apple Watch could land you with a £100 FINE
Bad news for tech-addicted fanbois behind the wheel
Murdoch to Europe: Inflict MORE PAIN on Google, please
'Platform for piracy' must be punished, or it'll kill us in FIVE YEARS
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
Sony says year's losses will be FOUR TIMES DEEPER than thought
Losses of more than $2 BILLION loom over troubled Japanese corp
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.