Most of UK wants tougher data loss fines
The ICO may have handed out its first fines, but people still want stronger data protection laws, a survey shows.


Most UK consumers want tougher penalties to be handed out to companies guilty of losing data, a survey has indicated.
Nearly two-thirds of respondents to a OnePoll survey, commissioned by LogRhythm, said organisations should receive large fines.
Almost a third went as far as to suggest company directors should be subject to criminal proceedings for serious breaches.
Yesterday the Information Commissioner's Office (ICO) issued its first fines since it was handed new powers in April.
Some praised the ICO for showing its muscle, while others suggested the penalties did not amount to much.
The majority of UK people also want to see compulsory data loss disclosure implemented in this country, the survey indicated.
Furthermore, seven in ten of the 5,000 consumers surveyed said more prescriptive regulations are needed.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Responding to the recent European Commission (EC) personal data protection strategy document, the European data protection supervisor came out in support of wide-ranging reform of data protection laws including the implementation of mandatory data breach notifications," said Ross Brewer, vice president and managing director, international markets, LogRhythm Europe, the Middle East and Africa (EMEA).
"Our research suggests there is solid public support for such moves."
The research proved companies do not just risk being punished for data loss incidents, they risk losing customers as well, Brewer added.
"Our findings show that when people hear about the loss of confidential information they will actively avoid the organisations involved 66 percent stated they would try to avoid future interactions, while 17 percent were adamant they definitely would not have anything more to do with the guilty party," he added.
It looks likely telecommunications companies will be required to disclose data breaches in the UK from next year, to fit in with EU regulation.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
CISA issues warning in wake of Oracle cloud credentials leak
News The security agency has published guidance for enterprises at risk
By Ross Kelly
-
Reports: White House mulling DeepSeek ban amid investigation
News Nvidia is caught up in US-China AI battle, but Huang still visits DeepSeek in Beijing
By Nicole Kobie
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse
News The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
By Emma Woollacott
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victims
News Companies need to treat victims with swift, practical action, according to the ICO
By Emma Woollacott
-
LinkedIn backtracks on AI training rules after user backlash
News UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
By Emma Woollacott
-
UK's data protection watchdog deepens cooperation with National Crime Agency
News The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
By Emma Woollacott
-
ICO slams Electoral Commission over security failures
News The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
By Emma Woollacott
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firms
News Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
By Emma Woollacott
-
ICO reprimands Coventry school over repeated data protection failures
News The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach
By Emma Woollacott
-
ICO dishes out fine to HelloFresh for marketing spam campaign
News HelloFresh failed to offer proper opt-outs, the ICO said, and customers weren’t warned their data would be used for months after they cancelled
By Emma Woollacott