Welcome To The Data Leak Lawyers Blog

Who is responsible for data protection? Blame HR, apparently…

According to some recent and rather worrying research, the question as to who is responsible for data protection is that it’s a HR problem, some executives say.

According to a spread of UK executives who were asked about where the responsibilities are in terms of compromised credentials, like stolen or misused passwords, it’s a HR training issue.

It’s understood that one-fifth of respondents placed the responsibility in the hands of HR departments, with close to a thousand executives questioned. Some respondents also considered compromised credentials and weak passwords as very little risk to the business as well.

read more

By Author

2017 saw 2.7 BILLIION data records compromised

The year of 2017 saw a monumental 2.7 BILLIION data records compromised around the world as a result of data breaches and data hacks, estimates say.

This overall estimated figure of data records compromised is terrifying, with the UK reportedly in second place (behind the US) when it comes to the league table of breaches around the world.

They really are happening all the time and all over the place, and figures suggest that numbers have almost doubled in the UK from 2016 to 2017.

read more

By Author

Research shows cybersecurity is not a priority for most businesses

Cybersecurity is not a priority for most businesses in the UK, results from recent research has indicated.

Despite us being in a time where the importance of cybersecurity has never been more prevalent, businesses are still not showing the respect to cybersecurity that it deserves. In fact, recent research suggested that just 10pc of UK businesses see cybersecurity as their biggest challenge to economic success, despite 2018 being the big year of the GDPR changes.

With the Information Commissioner’s Office (ICO) now having the power to fine data breach offenders up to £17m, how cybersecurity is not a priority is incredibly baffling.

read more

By Author

Are charity data breach incidents on the rise?

Charity data breach incidents appear to be on the rise, and there are a number of reasons as to why they can be an easy target for hackers, and why they may fall foul of data laws more easily than some other organisations.

According to recent figures, there were 59 charity data breach incidents reported to the Information Commissioner’s Office (ICO) between January and March in 2018. This is a 69pc rise on the previous year’s period.

Although the figures appear to be in-line with rises seen in some other sectors, which may be due to the greater awareness of data breach laws given the new GDPR, the figures cannot be ignored.

read more

By Author

When employees steal data to engage in personal contact with customers…

There is a very worrying trend of employees stealing data from their workplaces in order to engage personal contact with a customer. More often than not, it is an employee stealing a customer’s mobile phone number and then contacting the customer to “make friends” or try and pursue a romantic interest in the victim.

Clearly, this is wrong.

How will this worrying trend be stopped, and what can victims do if they are contacted by people who have stolen their contact information from a workplace?
read more

By Author

NHS health board left “devastated and disappointed” after another employee data protection breach

In what Hywel Dda University Health Board admitted to be the second data protection breach they have faced of this nature, yet another NHS worker has been caught accessing confidential medical records without a valid reason.

Instances of NHS workers accessing medical records when they have no reason or right to access them is a common problem at the moment. Most of the time, staff committing the breaches are accessing records for people they know out of nothing more than curiosity.
read more

By Author

When 246,000 U.S. Department of Homeland Security Employees’ details are found on a home computer, it’s time to question data security

The U.S. reported a discovery of 246,000 sensitive personal records belonging to Department of Homeland Security (DHS) employees on a home computer owned by an employee. The department and its employees have a vital mission to “secure the nation from the many threats” the U.S faces.

One can only wonder if they ever suspect their own colleague to be a major security threat to their personal lives…

This, let’s face it, is the kind of thing we do not want to hear about. Although this story hails from across the pond, we’ve had our own issues of a similar nature of course. The Heathrow USB stick incident springs to mind.
read more

By Author

More firms fear data breaches but don’t know how to deal with them…

With the number of high-profile data breaches growing, like the Yahoo and Equifax hacks as two examples, more and more businesses are aware that they’ll probably suffer one sooner or later.

However, even though they’re aware of the risks and the possibility of an imminent attack, a lot of businesses reportedly don’t know where to start in terms of data security and how to react when a breach does happen.

This is worrying…
read more

By Author

Are employees the biggest cybersecurity threat to businesses?

Research tells us that the biggest threat to a company or organisation’s cybersecurity is its own employees.

Although cyber-attacks are usually initiated by third party actors with malicious intent, it can be the shortcomings of employees that allow systems to become vulnerable. On top of that, employees who fail to adhere to policies and procedures are normally responsible for data leaks. With many employees working remotely, or with the ability to log in to servers from home, risks are increasing all the time.
read more

By Author

New ICO powers to fine organisations up to £17 million

Law changes in the coming months mean that the Information Commissioner’s Office (ICO) enforcement powers will no longer be subject to a maximum penalty fine of only £500,000. If any person, company or organisation is found to have breached Data Protection laws in the U.K., they may find themselves slapped with a much heftier fine.

The new maximum fine can be 4% of the company’s global turnover or €20million (almost £17million); whichever is the largest.

The government is introducing this as they adopt stricter E.U. laws for data protection into U.K. legislation. Despite Brexit, the government have said that the new regulation will be implemented by May 2018 in any event.
read more

By Author