Do you hold mailing lists or information about customers, suppliers and other individuals? If so, you may well need to be registered under the Data Protection Act and also comply with the privacy protection and other measures in the Act. Recently the Information Commissioner found that Orange Personal Communications Services had not processed personal data properly. New members of staff were allowed to share usernames and passwords when accessing the company IT system. In a separate case, it also found that Littlewoods Home Shopping had breached the Act in a case where a customer could not stop the company using her data for direct marketing even after she informed them.
Matthew Bailey says:
“The July Annual Report of the Information Commissioner describes many recent breaches of the law by businesses. We advise a wide range of clients on their obligations under the Data Protection Act 1998 and related regulations. At present the IC is consulting on a new code to replace the current Code of Practice on CCTV under the 1998 Act. All those who use CCTV at work need to comply with the current code until the new one is in place. It requires signs to be placed, amongst other requirements, so that people who are being filmed are aware of the filming.
In a related development, the European Court of justice held that the EU acted unlawfully in allowing private personal data about EU passengers traveling to the U.S. to be passed to the U.S. authorities without their permission. Therefore, a new solution had to be found. The EU has now come up with a new Passenger Name Records (PNR) arrangement. If you gather customers’ data and do mailings to them you should ensure you comply fully with the data protection rules. We can advise you on the law in this field and draft documents for you - such as employee email and internet policy documents for use with staff.”
Call Matthew Bailey for further information on 01329 822333