Should ICO get spot check powers over businesses?
A government report has said the Information Commissioner's Office should be able to assess private firms as well as public organisations.


The Information Commissioner's Office (ICO) should have the power to search private businesses, according to a new government report.
Looking at data protection changes in the controversial Justice and Coroners Bill, the Joint Committee on Human Rights has said boosting the ICO's ability to search businesses and take action against them would be a "human rights enhancing measure".
The report called for the Information Commissioner to be able to assess private businesses as well as public ones, essentially conducting spot checks. It also said the ICO should have the power to "seek sanctions" against public bodies which refused to comply with its notices exactly what those sanctions would entail wasn't outlined.
The report said such measures would help increase data protection of individuals. "We consider that these additional powers for the Information Commissioner would be a human rights enhancing measure," it stated.
Information commissioner Richard Thomas told the report's authors that his office should be able to serve an assessment notice on any data controller public or private and there must be "meaningful sanctions" for ignoring a notice.
He added: "We received welcome new powers in the Criminal Justice and Immigration Act 2008 to levy fines on data controllers for deliberately or recklessly breaching the data protection principles. However it is important that the Government brings these powers into force as soon as possible."
The Confederation for British Industry (CBI) disagreed with the proposed spot checks of private businesses data practices, saying the current system works "perfectly well".
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"At the present time, if the Information Commissioner suspects a business is breaching the data protection rules, he can apply for a warrant [to search the business]", a CBI spokesperson told IT PRO.
Removing the requirement to have just cause to search would mean the ICO could assess a business that had no data protection problems. "We didn't think it was proportionate," the spokesperson added. "The current system works perfectly well."
The report also slammed the information sharing aspect of the bill, which would give the government the power to share data across public bodies. Justice Secretary Jack Straw has already publicly backed down from that proposal after a public uproar.
Freelance journalist Nicole Kobie first started writing for ITPro in 2007, with bylines in New Scientist, Wired, PC Pro and many more.
Nicole the author of a book about the history of technology, The Long History of the Future.
-
AI is helping bad bots take over the internet
News Automated bot traffic has surpassed human activity for the first time in a decade, according to Imperva
By Bobby Hellard
-
Two years on from its Series B round, Hack the Box is targeting further growth
News Hack the Box has grown significantly in the last two years, and it shows no signs of slowing down
By Ross Kelly
-
ICO admits it's too slow dealing with complaints – so it's eying up automation to cut staff workloads
News The UK's data protection authority has apologized for being slow to respond to data protection complaints, saying it's been overwhelmed by increased workloads.
By Emma Woollacott
-
“Limited resources” scupper ICO probe into EasyJet breach
News The decision to drop the probe has been described as “deeply concerning” by security practitioners
By Ross Kelly
-
Surge in workplace monitoring prompts new ICO guidelines on employee privacy
News Detailed guidance on how to implement workplace monitoring could prevent data protection blunders
By Ross Kelly
-
TikTok could be hit with £27m fine for failing to protect children's privacy
News Social media firm issued with a notice from the ICO for potential violations of UK data protection laws
By Bobby Hellard
-
What is AdTech and why is it at the heart of a regulation storm?
In-depth The UK data regulator has come under heavy fire for consistently delaying much-needed action, privacy groups say
By Carly Page
-
ICO crackdown on AI recruitment part of three-year vision to save businesses £100 million
News ICO25 outlines a fresh approach that involves releasing learning materials, advice, and a new ICO-moderated discussion forum for businesses
By Connor Jones
-
Clearview AI fined £7.5m over improper use of UK data
News Australian facial recognition firm collected 20 billion images from the internet without consent in order to build its database
By Bobby Hellard
-
UK data watchdog cut IT spending by £1.2 million during pandemic
News The ICO’s IT budget has been slashed by around 23% since 2019
By Sabina Weston