Information Commissioner complains that most businesses refuse data protection audits

The Information Commissioner, Christopher Graham, appeared on the BBC Radio 4 Today programme this morning to discuss the unwillingness of private companies to accept free data protection audits from the ICO. In their annual report, released today, the ICO revealed around a third of the 603 breaches reported in the 2010/11 period occurred in the private sector.

Although public bodies make up the majority of the breaches, they are obligated to report them, unlike the private sector. A mere 19% of business who were contacted during the period agreed to an audit, this compares to 71% in the public sector.

Mr Graham said:

“Lenders, general businesses and direct marketing companies account for almost a third of total complaints to the ICO, and businesses were the top sector for reporting data security breaches to us last year.”

“Despite this, many of them are still resisting our offer to undergo audits. We've written to organisations we consider to be high risk, but the response has been disappointing.”

Although the ICO consider undergoing an audit to be a ‘badge of honour’, businesses appear to view them as invasive, time-consuming and worthless. It is clear that the current voluntary system of audits is not working, and an alternative is necessary to reduce data breaches.

Comments

[John Galt]

My biggest problem is not 3rd party organisations, but rather various parts of the UK government and local authorities.

These are the biggest threat to my privacy.

I have registered with the Mailing Preference Agency and the Telephone Preference Agency, which keeps those who have my personal details to a minimum.

[bubbery sunglasses]

“Lenders, general businesses and direct marketing companies account for almost a third of total complaints to the ICO, and businesses were the top sector for reporting data security breaches to us last year.”

[pandora sale]

“Lenders, general businesses and direct marketing companies account for almost a third of total complaints to the ICO, and businesses were the top sector for reporting data security breaches to us last year.”

[ray bans]

Although the ICO consider undergoing an audit to be a ‘badge of honour’, businesses appear to view them as invasive, time-consuming and worthless. It is clear that the current voluntary system of audits is not working, and an alternative is necessary to reduce data breaches.

[bubbery sunglasses]

“Despite this, many of them are still resisting our offer to undergo audits. We've written to organisations we consider to be high risk, but the response has been disappointing.”

[Buy and sell]

This is a wonderful opinion. The things mentioned are unanimous and needs to be appreciated by everyone. Thanks for share this with us.