Data Privacy & Cybersecurity

ICO v. DSG Retail - Data Protection Security Ruling

The UK's Information Commissioner's Office (ICO) has won a Court of Appeal case against DSG Retail Limited, reinstating a £500,000 fine for a 2020 data breach. The ruling clarifies that organisations must secure all personal data, regardless of whether individuals can be identified from exfiltrated data.

EDPB Report on Right to Erasure Enforcement

The European Data Protection Board (EDPB) has released a report detailing the outcomes of its Coordinated Enforcement Framework (CEF) action on the right to erasure under GDPR. The report identifies seven recurring challenges faced by controllers in implementing this right and offers recommendations for improvement.

FTC Finalizes Boeing-Spirit Acquisition Consent Order

The FTC has finalized a consent order regarding Boeing's acquisition of Spirit AeroSystems. The order requires Boeing to divest certain Spirit assets and continue supplying aerostructures to competing contractors for military aircraft programs. This action aims to protect competition in commercial and military aircraft markets.

ICO Orders Nottingham University Hospitals NHS Trust to Disclose Data

The UK's Information Commissioner's Office (ICO) has ordered Nottingham University Hospitals NHS Trust to disclose nurse and midwife referral data to the Nursing and Midwifery Council. The trust must comply within 30 days, or face potential contempt of court proceedings.

ICO Upholds FOI Complaint Against DWP PIP Scoring

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information (FOI) complaint against the Department for Work and Pensions (DWP). The DWP failed to fully consider information requested by a complainant regarding changes to the Personal Independence Payment (PIP) scoring system.

ICO Upholds FOI Complaint Against Cheshire Constabulary

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information (FOI) complaint against Cheshire Constabulary. The ICO ruled that the constabulary cannot rely on a specific FOI exemption to withhold information related to the Lucy Letby case and must issue a fresh response.

ICO Decision Notice: Greater Manchester Combined Authority FOI Failure

The UK's Information Commissioner's Office (ICO) found that the Greater Manchester Combined Authority failed to comply with section 10(1) of the Freedom of Information Act (FOIA) regarding a request for information about the Voices of Resilience event. While all held information has now been disclosed, the authority admitted its initial searches were inadequate.

ICO upholds Barts Health NHS Trust FOI exemption

The UK's Information Commissioner's Office (ICO) has upheld Barts Health NHS Trust's decision to exempt certain information related to patient care from disclosure under the Freedom of Information Act (FOIA). The decision means the Trust does not have to confirm or deny if it holds specific details about a relative's medication and wider care.

ICO Upholds FOI Complaint Against Chapel St Leonards Council

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information (FOI) complaint against Chapel St Leonards Parish Council. The ICO ruled that the council wrongly cited section 14 of the FOIA (vexatious requests) and must now issue a fresh response to the complainant's request regarding a gardening contract.

ICO Decision: Home Office breached FOI on asylum seeker nationalities

The UK's Information Commissioner's Office (ICO) has ruled that the Home Office breached FOI section 10(1) by failing to disclose information regarding asylum seeker nationalities in a timely manner. The decision requires the Home Office to disclose the requested nationalities information.