Welcome To The Data Leak Lawyers Blog

ICO completes follow-up assessment of Dyfed Powys Police

The ICO has completed a follow-up assessment of Dyfed Powys Police who signed an undertaking last year to improve their data protection compliance. The undertaking meant that the police force had to engage in force-wide data protection training and refresher training, as well as ensuring that training and monitoring was properly recorded to address non-compliance and ensure that security measures are in place to properly protect data.

The involvement of the ICO (Information Commissioner’s Office) – the UK’s data watchdog – was to ensure that Dyfed Powys Police were upholding their data protection responsibilities after a number of incidents had previously occurred.
read more

By Author

Councils data breaches and GDPR

Council data breaches and the GDPR that’s coming into force this month is a key topic for discussion. With councils and other public sector authorities often experiencing high levels of data breaches and data leaks, it’s imperative that enough attention is paid to the new regulations that could see organisations fined a heck of a lot more money for breaching data laws.

We take on and represent a lot of people for council data breaches, so we know how often they happen, and we know how bad they can be for the victims. Given the nature of the data that councils hold, any breach or leak can often be very serious for the victims who are entitled to claim for data protection breach compensation.
read more

By Author

School data breach compensation claims

School data breach compensation claims can often be serious and incredibly sensitive as the victim of the data breach will usually be a minor. A minor can still claim for data breach compensation with an appropriate adult as their “Litigation Friend”, which is normally a parent or guardian.

School data is of course very private and can be very sensitive. Schools must be privy to a wealth of personal and sensitive data about children, including their domestic circumstances and medical details. A school data breach or data leak could involve thousands if it covers a particular Local Education Authority area, so this type of data must be kept safe and secure.
read more

By Author

Scams and fraud from data breaches and data leaks

Scams and fraud from data breaches and data leaks are common. In fact, scams and fraud are common anyway, with more than 10,000 cases reported last year, which was a five percent rise on the previous year.

It can be so easy for people to fall victim to scams and fraud that stem from data breaches, so the big question is how people can protect themselves, and what the organisations who hold our money – and data – can do to protect us as well. The burden of responsibility is a two-way street, and there is plenty that banks and organisations can do to better protect us.
read more

By Author

Is an organisation responsible for an employee data breach?

“Is an organisation responsible for an employee data breach?”

This question is rarely asked when people contact us for help and advice about a data protection compensation claim, but it can be a key one. Many people often assume that the organisation – i.e. the person’s employer – must be responsible; but that’s not always the case.

Data breach incidents are assessed on a case-by-case basis, but there can be scenarios where an employee’s data breach can leave the employer vicariously liable, meaning the organisation they work for is who you pursue. In fact, a recent landmark case has potentially made it easier to do this as well.
read more

By Author

Are victims of the Equifax data breach being looked after properly?

Are victims of the Equifax data breach being looked after properly? Some data suggests they’re not, and with an estimated 700,000 UK victims of the breach, Equifax must do as much as they can to ensure they look after the victims.

We are representing a large group of individuals who were affected by the breach, so if you are looking for advice about making a claim, we can help.

With personal and sensitive data compromised in a data breach, it’s imperative that victims are properly looked after by the organisation responsible for the breach. Are Equifax doing enough in this case?
read more

By Author

Last year’s WannaCry attack was a lucky escape for the NHS

Last year’s WannaCry attack was a lucky escape, and the government is quite rightfully being urged to learn lessons from the encounter. We are almost a year on from the day that saw around one-third of all NHS Trusts in England disrupted by the malware attack that specifically targeted older (and therefore weaker) systems and servers.

The attack saw hundreds of other NHS organisations – including almost 600 GPs – infected during the attack, and some 20,000 hospital appointments and operations were cancelled.

Ultimately, the WannaCry attack was simple malware that still managed to cripple the NHS. It was a lucky escape, and future attacks involving medical data could be far, far worse.
read more

By Author

YouTube accused of illegally collecting children’s data

YouTube has been accused of illegally collecting children’s data by Consumer Rights groups who have filed a legal complaint against them.

The Google-owned video and music platform is supposed to be for persons aged 13 and older, yet studies indicate that it’s most popular with children aged between 8 and 12.

According to the concerns raised and the complaints filed, YouTube is illegally collecting the data without parental consent, and they know that they’re doing it; raising fear that they’re in breach of data protection legislation.
read more

By Author

Uber data breach was a lesson in how NOT to handle a cyberattack

The Uber data breach was a clear lesson in how NOT to handle a cyberattack. When the hackers contacted Uber by email, back in November 2016, they demanded a six-figure sum in order to destroy the wealth of data they’d stolen so news of the breach would quietly fade away once the bribe had been paid.

As opposed to dealing with the data breach in the appropriate way, Uber decided to pay-off the hackers and cover the breach up. A payment of $100,000 was reportedly made to the two hackers, and employees responsible for the security issue passed the whole thing off as a “bug bounty” program, which is where hackers are offered money to try and find weaknesses.

In reality, they were simply hacked, and Uber have not only paid the heavy price of the bribe, but also the cost of a handling the crisis thereafter.
read more

By Author

Kensington and Chelsea council fined £120,000 for indeliberate data breach

The Royal Borough of Kensington and Chelsea council has been fined £120,000 for an indeliberate data breach because the personal details of empty property owners in their constituency was published, contrary to data protection laws.

The Information Commissioner’s Office (ICO) has called it a “serious contravention” which has led to the huge fine being issued of £120,000.

According to the ICO reports, a Freedom of Information (FOI) request had been made in relation to the Grenfell Tower incident as part of research into social inequality, and it was this request that led to the accidental disclosure.
read more

By Author