Back in April 2024, the ICO (Information Commissioner’s Office) published new detailed guidance about Transparency in health and social care. This was aimed at all UK organisations (including private and third sector organisations) which deliver health or social care services.

Last week, the Information Commissioner’s Office (ICO) reported on their website that it had issued reprimands to Glasgow City Council and City of Edinburgh Council for failures to respond promptly to individuals who requested personal data (commonly known as ‘data subject access requests’, or ‘DSAR’/’SAR’). 

Last month the ICO published new online guidance on keeping employment records, another useful addition to their detailed advice on Employment practices and data protection.

This week, the ICO released new guidance for employers, in a Q&A format, on responding to Subject Access Requests (SARs).  It comes with an accompanying blog titled "It's important not to get caught out" - New SARs guidance for employers.

Next week the ICO is running a free online webinar, 'Data protection and marketing for your small business', to provide advice on different types of direct marketing activities (using email, text, phone call, online messages, for example). 

Last week, the Information Commissioner's Office (ICO) issued a statement that North Ayrshire Council's use of Facial Recognition Technology (FRT) in its schools (which involved processing the personal data of pupils ranging in age from 11-18 years) infringed UK data protection laws. 

Last month the Information Commissioner's Office (ICO) published new detailed guidance for businesses on how to make direct marketing calls in a legitimate, lawful way. Later it published similar online guidance on electronic mail marketing.

Handling subject access requests (SARs) may soon become an even greater headache for independent schools. 

In October The Guardian reported how the family of an 88-year old resident with dementia at Reigate Grange in Surrey (part of the Signature Senior Lifestyle chain) installed a hidden camera which uncovered shocking abuse of their mother by care staff. 

The Information Commissioner's Office (ICO) is currently collaborating with the Children's Commissioners Office on a resource for all UK organisations whose work involves safeguarding children.  It will give practical advice and tools which staff can use to assist if sharing personal data in the context of safeguarding (such as privacy notices, DPIAs and case studies to illustrate best practice).

Draft guidance on workplace monitoring, aimed at employers, has been published by the Information Commissioner's Office (ICO).  Consultation is open for UK organisations to submit views until 11th January 2023.

Last week at the ICO's Data Protection Practitioners Conference, there was much discussion of IC025, the regulator's recently published draft action plan for the coming three years.  Consultation is ongoing, with the finalised plan to be in operation from October 2022.