Welcome To The Data Leak Lawyers Blog

Most U.K. citizens don’t trust organisations and businesses with their personal data

The Information Commissioner’s Office (ICO) conducted a study to see how U.K. citizens feel about their personal data being shared with organisations and businesses, and the results reflect an inherent mistrust and lack of confidence in how their data is being stored and handled.

The results of the study are likely to have been influenced by the colossal and numerous high-profile data breaches in the last couple of years that have seen millions of people have their personal data breached time and time again.
read more

By Author

Are employees the biggest cybersecurity threat to businesses?

Research tells us that the biggest threat to a company or organisation’s cybersecurity is its own employees.

Although cyber-attacks are usually initiated by third party actors with malicious intent, it can be the shortcomings of employees that allow systems to become vulnerable. On top of that, employees who fail to adhere to policies and procedures are normally responsible for data leaks. With many employees working remotely, or with the ability to log in to servers from home, risks are increasing all the time.
read more

By Author

New ICO powers to fine organisations up to £17 million

Law changes in the coming months mean that the Information Commissioner’s Office (ICO) enforcement powers will no longer be subject to a maximum penalty fine of only £500,000. If any person, company or organisation is found to have breached Data Protection laws in the U.K., they may find themselves slapped with a much heftier fine.

The new maximum fine can be 4% of the company’s global turnover or €20million (almost £17million); whichever is the largest.

The government is introducing this as they adopt stricter E.U. laws for data protection into U.K. legislation. Despite Brexit, the government have said that the new regulation will be implemented by May 2018 in any event.
read more

By Author

A comparison between the EU and U.S. data breach notification laws

Data Protection should always be a huge concern for companies and organisations. As with most laws, there are differences that can give some people in some countries more rights than others, such as the differences and similarities with data breach notification laws within both the EU and U.S.

In a world where data breaches can be cross-jurisdictional – i.e. a hacker from the U.K. hacks an American business – these differences could become quite important. It’s a challenge we face when representing victims for claims.

So, what are some of the characteristics of EU and U.S. data laws?
read more

By Author

Introducing the vicious cycle of data breach fatigue

It seems like we can never escape them; they’re in the headlines and our news feeds all the time, and data breaches are such a common occurrence these days.

So, what is being done to stop data breaches occurring?

Surely with advances in smartphones, self-driving cars and artificial intelligence, we have the technology and skills to stop hackers from cracking websites and security walls? Surely we have access to enough decent cybersecurity software to protect data, and are capable of training staff and enacting procedures and protocols to protect data from leaks?
read more

By Author

A simple guide to data breach terms

These days, data breaches are happening left right and centre. A lot of them are dealt with discretely and we may never hear about them, but for those that are publicised, statements from offending organisations can be littered with jargon and tech-words.

Sometimes when things go wrong, organisations are keen to blame anyone and anything but themselves. Some may play that they are the victims of “super hackers” when in reality the breach could have been avoided with better cybersecurity in place. To try and understand what they may be saying underneath the “waffle”, we’ll go over a few simple terms.
read more

By Author

Debt collection agency data breaches

Being in debt is not usually something people are comfortable with others knowing. It can be a difficult situation that some people are powerless to stop. Sometimes things just don’t go our way and we’re left in a hole with no obvious way out.

When debts aren’t settled, debt collectors are usually never far behind. However, although it’s their job to recover money, the business of debt collection must be conducted in accordance with the law. It must be done in a professional manner which includes respecting someone’s personal information and data privacy rights.
read more

By Author

“We Heart It” website suffers data breach reportedly affecting eight million accounts

Popular image-sharing site, We Heart It, disclosed a data breach where eight million accounts have reportedly had their emails and passwords stolen.

Although only recently discovered, the breach is reported to have happened five years ago for accounts created between 2008 and November 2013.

Email addresses, usernames and encrypted passwords are thought to have been compromised. The company also admitted that, although encrypted, the passwords were unfortunately not secured.
read more

By Author

How should an organisation prepare for a data breach?

It’s now 2018. To many of us the internet is so important in our day-to-day lives it’s on the same level as eating and drinking. In just a few decades, we’ve gone from a screeching dial-up connection to super-fast Wi-Fi broadband (though not always quite fast enough) to meet with our ever-increasing online demands.

Technology is still developing at an alarming rate to allow us to do almost anything efficiently, accurately and even remotely. However, that isn’t to say that these technological advancments are perfect. Whilst we encourage new technology to allow us to make video calls with our grandparents half way across the globe and to send money with a swipe of our phones, cybersecurity is still lagging behind.
read more

By Author

What are the risks of data theft?

With big data comes big risks…

This is even more the case in today’s growing digital era. Any company or organisation can be at risk of data theft if they’re not careful. That’s why cybersecurity is crucial to ensure that any risk of data theft is kept at a minimum. It’s not just about working hard to prevent cyber-theft, but it’s about working smart to stay one step ahead of the game.

The risks are huge.
read more

By Author