Welcome To The Data Leak Lawyers Blog

How should an organisation prepare for a data breach?

It’s now 2018. To many of us the internet is so important in our day-to-day lives it’s on the same level as eating and drinking. In just a few decades, we’ve gone from a screeching dial-up connection to super-fast Wi-Fi broadband (though not always quite fast enough) to meet with our ever-increasing online demands.

Technology is still developing at an alarming rate to allow us to do almost anything efficiently, accurately and even remotely. However, that isn’t to say that these technological advancments are perfect. Whilst we encourage new technology to allow us to make video calls with our grandparents half way across the globe and to send money with a swipe of our phones, cybersecurity is still lagging behind.
read more

By Author

What are the risks of data theft?

With big data comes big risks…

This is even more the case in today’s growing digital era. Any company or organisation can be at risk of data theft if they’re not careful. That’s why cybersecurity is crucial to ensure that any risk of data theft is kept at a minimum. It’s not just about working hard to prevent cyber-theft, but it’s about working smart to stay one step ahead of the game.

The risks are huge.
read more

By Author

Charity worker prosecuted for sending confidential information about vulnerable people to himself

Robert Morrisey was prosecuted by Preston Crown Court for sending confidential information about 183 people to his personal computer.

At the time of the breach, Morrisey was working as a mentoring co-ordinator for Rochdale connections Trust charity.

In copying the sensitive information without permission or the knowledge of his employer, Morrisey lost his job. He also lost his position as a Magistrate and was ordered to pay over £1,800.00.
read more

By Author

Is the ethical handling of data the new moral responsibility for businesses and organisations? Could it help gain a competitive advantage?

The ethical handling of data has always been the aim of data protection watchdogs and officials. Companies and organisations have the responsibility to handle data securely under the Data Protection Act (DPA), but there is a term known as ‘ethically handling data‘ that’s growing in popularity.

The difference with ethical handling of data and normal handling of data goes beyond privacy, some believe. It’s about whether customers are aware of how their data will be used and how it will be protected from third parties above and beyond what anyone would generally assume.
read more

By Author

NHS remote and automated systems: What are the concerns?

In the past few years, the National Health Service (NHS) has made attempts to expand and ease the pressure on its extremely busy and hectic services with use of new technology. This included setting up an entire NHS internal email system that allows staff to send ‘secure’ emails to each other to share ‘sensitive information’.

An electronic prescription service is also available that allows GPs to send a prescription directly to a pharmacy.

But in the increasingly interconnected digital world, what are the concerns over using such technology? Should we be worried?
read more

By Author

Three NHS employees found guilty of illegal data snooping

Despite Information Commissioner’s Office (ICO) warnings, NHS employees are continuing to breach data protection laws. We again see employees being found guilty of illegally accessing medical records belonging to people they know – i.e. family, friends, neighbours and colleagues – we assume this data snooping is merely to satisfy their curiosity.

In this latest batch, three perpetrators were fined by the ICO for their clear and obvious breaches, and we are yet again left wondering what can be done to stop these continual events happening.
read more

By Author

Reportedly, only 25% of companies can detect data hacks or data leaks

According to some research, as little as 25% of companies have the technology installed to detect hacking and data breaches.

This is a shocking fact, but not at all surprising; and it’s a reminder of how the huge cyber hacks like the TalkTalk one from 2015 ended up happening. They, as many have been in the past, were just too slow to realise a hack had occurred, and by the time they knew, hundreds of thousands of customers had already had their data accessed.

If only a quarter of businesses can detect these hacks, we’re set for a bleak future when it comes to cybersecurity.
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author

Employees reportedly need updated data security training

As technology in industry improves, many employees are being provided with more and more advanced devices and software to help for a more efficient workplace. From unified portals to mobile devices, employees are often given shiny new tools to work with all the time; but do they know how to use them safely?

A significant proportion of data breaches can result from employee mistakes: from accidental emails being sent, to uploading information online, and hackers targeting vulnerabilities to gain entry into customer databases. Cybersecurity experts have long identified employees as one of the weakest links when it comes to securing data in organisations.
read more

By Author

Work-assigned mobile devices are increasing cyber security risks for organisations

Laptops, phones and tablets are more and more common inside the workplace and out, allowing employees to present information easily, or work outside of the workplace. Company directors are also aware that it’s very common for employees to use such devices for other things like watching videos, reading news, entertainment purposes and accessing social media.

Whether these devices are used for professional or personal use, one thing remains the same: “an enterprise’s security is only as strong as its weakest link”.

These devices can often be the weakest link…
read more

By Author