The Information Commissioner's Office (ICO) has reached an agreement with Cabinet Office over the monetary penalty notice issued in December for the New Year honours list data breach. The £500,000 fine for violations of Articles 5(1)(f) and 32(1) of the GDPR has now been reduced to £50,000. The Cabinet Office appealed the size of the penalty to the First-tier Tribunal. Both parties agreed to the reduction, which has also been approved by the Tribunal. Information Commissioner, John Edwards, said: "While I consider the original fine was proportionate... I recognise the current economic pressures public bodies are facing, and the fact that in certain cases fines may be less critical in achieving deterrence."
In June, the ICO adopted a new approach to public sector enforcement. The significant change is that the ICO will now use its discretion to reduce the monetary penalty amount or apply a different regulatory action, such as warnings, reprimands and enforcement notices. Monetary penalties will now only be issued for more serious violations.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 4,350 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.
