UK Privacy Regulator Granted More Authority: Further Enforcement of Business’ Data Security Practices Is Likely

The United Kingdom’s privacy regulator received a government infusion of £six million to pay for new data protection powers provided to it earlier this year. The Information Commissioner’s Office indicates this increase in funding will be primarily used to ramp up its enforcement efforts as required by its new data protection powers.

Organizations in the United States with operations in the UK, or who transmit personal information through the UK, should take immediate steps to ensure proper data protection policies and procedures are in place and review their data retention practices.

The Privacy and Information Security Practice has prepared a Client Advisory reviewing the implications of this development and the passing of the Criminal Justice Immigration Act.