3 law firms, 6 weeks: data protection crackdown continues

IMPACT®:
The Information Commissioner’s Office (ICO) may be unhappy with its existing powers, but it is not afraid to use them. Yesterday, the ICO announced the successful prosecution of a small London solicitors firm for failing to notify the ICO of its data processing despite repeated reminders. The duty to notify is imposed by the Data Protection Act 1998 (DPA).
The level of fine – just under £2,000 – is small, less than half of the £5,000 maximum. Depending upon your interpretation, this could either reflect the fact that the prosecution was for a technical breach of the DPA, or it could indicate that the Courts have not yet cottoned on to public concern about data protection. Regardless, the threat of prosecution should prove a powerful incentive to most businesses to comply with the DPA.
The fact that this is the 3rd solicitors prosecution firm prosecuted in just 6 weeks suggests that the ICO is stepping its DPA compliance campaign up a notch.
This latest DPA news comes at a time when Richard Thomas, the ICO himself, has just been awarded the Privacy Leadership Award by the International Association of Privacy Professionals, for his sterling work in publicising privacy and data protection issues. (Thanks to Information Overlord for spotting this.)