How is it already October??!  This year continues to be unbelievably busy and it’s really exciting that some of our time recently has been all about developing new products and services.  As always, please get in touch with any queries or questions you may have. 

What’s new with the regulators? 

There has been a lot going on recently!  In August, Tkm attended the FOI update run by the Centre of Freedom of Information which had some interesting sessions. This included one by Carol Ewart, from the Campaign for Freedom of Information, on the proposed changes to the legislation in Scotland.    

August also saw an announcement from the ICO about taking action against 8 individuals regarding the alleged misuse of personal data collected by garages to generate leads for personal injury claims.  The individuals are being prosecuted under both the Computer Misuse Act (1990) and the Data Protection Act (1998) (as the offences were committed pre-GDPR) and is due to be heard on 27 October 2022. You can read more about this at https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2022/08/ico-acting-against-eight-individuals-over-alleged-theft-of-road-traffic-accident-data-from-garages/    

It has been a fairly busy few months for data protection and other items to note include: the issuing of a revised approach for working with the public sector by the ICO https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2022/06/ico-sets-out-revised-approach-to-public-sector-enforcement/; and the ICO’s issuing of an opinion on processing being carried out by the DVLA  https://ico.org.uk/media/about-the-ico/documents/4020676/dvla-opinion-20220613.pdf 

All processing of personal data requires a lawful basis and this provides a really useful explanation of the difference between the use of legal obligation and task in the public interest.  I have already put it on the reading list for all of our data protection practitioner courses.  We have also seen the ICO issue reprimands to 6 public sector organisations together with Virgin Media for failing to meet the requirements around subject access request.  They also issued a notice of intent to fine Tik Tok £27M – more on both of these in my next update. 

Finally, we obviously haven’t forgotten the UK parliament putting the Data Protection and Digital Information Bill on hold.  What this means longer term is still to be seen, although we have started getting prepared, and recently attended a really interesting session with Amberhawk training on what the changes might mean. 

What developments have we been working on?  

We have got so many exciting plans and are developing our training portfolio, both at Tkm and FYI – although the most important thing is that you are excited about it too and are always grateful for your input.  If you would like to tell us what you need, please complete our survey at https://forms.office.com/pages/designpagev2.aspx?lang=en-US&origin=OfficeDotCom&route=Start&subpage=design&id=CxWQo9yuXEeyDpNRBTqKoEyhdaZ6_HBEgiu0msS5qW1UODhPVEU2UkRBNTIxVUdZV1VJU0FEVEZKVC4u 

One exciting development is the launch of our online shop, which will provide a definitive catalogue of FYI and Tkm training courses.  Have a look at http://www.dataprotectiontrainingservices.com   

We discussed a whole range of options at our recent strategy weekend – so great to see Heather, Frank and Lauren in person.  You can help shape the direction of travel by completing our survey and also visit our online shop to see what we are launching soon. 

Enjoy the rest of the month and look out for my next update at the start of December.

Liz