ICO issues provisional view to fine Clearview AI Inc over £17 million

The Information Commissioner’s Office (ICO) has announced its provisional intent to impose a potential fine of just over £17 million on Clearview AI Inc – a company that describes itself as the ‘World’s Largest Facial Network’. In addition, the ICO has issued a provisional notice to stop further processing of the personal data of people in the UK and to delete it following alleged serious breaches of the UK’s data protection laws. Today’s announcement follows a joint investigation by the ICO and the Office of the Australian Information Commissioner (OAIC),…

Read More

ICO calls on Google and other companies to eliminate existing privacy risks posed by adtech industry

The Information Commissioner’s Office (ICO) has set out clear data protection standards that companies must meet to safeguard people’s privacy online when developing new advertising technologies (adtech). The privacy standards published in a Commissioner’s Opinion come as a warning to companies that are designing new methods of online advertising, that they must comply with data protection law and stop the excessive collection and use of people’s data. Currently, one of the most significant proposals in the online advertising space is the Google Privacy Sandbox, which aims to replace the use…

Read More

UK launches data reform to boost innovation, economic growth and protect the public

The Information Commissioner’s Office (ICO) is set for an overhaul to drive greater innovation and growth in the UK’s data sector and better protect the public from major data threats, under planned reforms announced by the Digital Secretary Oliver Dowden today. One year on from the publication of the National Data Strategy, the government has today launched a wide-ranging consultation on proposed changes to the UK’s data landscape. As part of this, a new governance model is planned for the ICO, including an independent board and chief executive to mirror…

Read More

New UK certification schemes will “raise the bar” of data protection in children’s privacy, age assurance and asset disposal

The Information Commissioner’s Office (ICO) has approved the first UK GDPR certification scheme criteria. Certification was brought in under the UK GDPR as a way to help organisations demonstrate compliance with data protection rules and, in turn inspire trust and confidence in the people who use their products, processes and services. Certification works by providing a framework for organisations to follow, which offers clients and customers assurance that they are adhering to strong standards. Organisations with expertise in a particular area can develop scheme criteria. The ICO has approved the…

Read More

ICO consults on how organisations can continue to protect people’s personal data when it’s transferred outside of the UK

The Information Commissioner’s Office (ICO) has launched a public consultation on its draft international data transfer agreement (IDTA) and guidance. When organisations send personal information to a country outside the UK, they must ensure people’s data protection rights continue to be protected. An IDTA is a contract that organisations can use when transferring data to countries not covered by adequacy decisions. The IDTA will replace the current standard contractual clauses (SCCs) to take into account the binding judgment of the European Court of Justice in a case commonly known as…

Read More