It has been reported in the press over recent weeks that law firm ACS Law is under investigation by the Information Commissioners Office after they
lost the personal data of thousands of private individuals. The details, which included names, addresses and credit card details were hacked and then leaked online, leaving questions about the firms data security measures.
The Information Commissioner will be responsible for investigating the circumstances surrounding the leaked data; circumstances which include claims of illegal file sharing and media downloads on the part of those whose details have been leaked, and determine what action is necessary. Steps taken against the law firm will be qualified under the provisions of the Data Protection Act.
A spokewswoman for the Information Commissioners Office said:
“ the ICO takes all breaches of the Data Protection Act seriously. Any organisation processing personal data must ensure that it is kept safe and secure. This is an important principle of the Act. “
The story is a prime example of why data protection is such a big issue and why it is important that organisations and companies have data protection measures in place, and take them seriously. As a result of the loss of data by ACS Law, there is now the fear that those people whose data was lost could be targeted by criminals who have downloaded the data. The victims of the data loss could see their credit cards being used fraudulently or even being targeted personally by people who have taken note of who they are and where they live.
The Data Protection Act was put in place for a reason and the Information Commissioners Office is at the ready to police and punish anyone who fails to abide by the legislation.