Personal data privacy risks
Reputational and privacy risks associated with increased use of personal data for content personalisation.
36 items
1 source
7 inquiries
Source spread
Where this theme appears
Personal data privacy risks has been flagged across 1 independent accountability source:
36 inquiry recs
This theme has been identified in one data source. As more data is added, cross-references may emerge.
Browse by source
Source-grouped records are useful for tracing where a concern came from. Large sections show the 50 strongest matches for that source; counts still show the full theme total.
Inquiry Recommendations (36)
153 — Press reporting restraints
Recommendation: Consideration should be given to the desirability or otherwise of introducing further restraints on press reporting of proceedings before Children’s Hearings and in the Sheriff Court in children’s cases (18.35-36).
Unknown
146 — Confidential information to Sheriff
Recommendation: Provision should be made for the giving of information confidentially to the Sheriff (18.27).
Unknown
78 — Guide on disclosure by healthcare staff
Recommendation: The Prison Service should prepare a readable guide, which explains the circumstances in which personal information about a prisoner should be disclosed by healthcare staff to officers on the wing. The guide should contain practical examples of situations where disclosure …
Unknown
33 — Policy on disclosing medical reports to prisons
Recommendation: In the light of such legal advice as the Courts Service receives, it should publish a policy on the disclosure to the prison of medical or psychiatric reports on a prisoner submitted to the court.
Unknown
27 — NOMIS alert for sensitive security information
Recommendation: NOMIS should include a facility for an alert to appear if information is held by the Security Department on prisoners which could affect their management but which is too sensitive for wider dissemination. An officer at the grade of senior …
Unknown
L74 — Qualified One Way Costs Shifting
Recommendation: In the absence of the provision of an approved mechanism for dispute resolution, available through an independent regulator without cost to the complainant, together with an adjustment to the Civil Procedure Rules to require or permit the court take account …
Words of: Matt Hancock, Secretary of State for Digital, Culture, Media and Sport, statement to the House of Commons on the Leveson consultation response, 1 March 2018 (HC Deb vol 636 col 966)
Gov response: Mr Speaker, we have decided not to commence Section 40 of the Crime and Courts Act 2013 and to seek repeal at the earliest opportunity.
Not accepted
L73 — Civil Procedure Rules on Costs
Recommendation: The Civil Procedure Rules should be amended to require the court, when considering the appropriate order for costs at the conclusion of proceedings, to take into account the availability of an arbitral system set up by an independent regulator itself …
Words of: Matt Hancock, Secretary of State for Digital, Culture, Media and Sport, statement to the House of Commons on the Leveson consultation response, 1 March 2018 (HC Deb vol 636 col 966)
Gov response: Mr Speaker, we have decided not to commence Section 40 of the Crime and Courts Act 2013 and to seek repeal at the earliest opportunity.
Not accepted
L72 — Exemplary Damages for Media Torts
Recommendation: Exemplary damages (whether so described or renamed as punitive damages) should be available for actions for breach of privacy, breach of confidence and similar media torts, as well as for libel and slander. The application to a defendant of any …
Words of: David Cameron, Prime Minister, speech opening the House of Commons emergency debate on the Royal Charter on Press Conduct, 18 March 2013 (HC Deb vol 560 cols 632-634)
Gov response: Two important but relatively small legislative changes need to be made. Let me explain what they are. First, Lord Justice Leveson said—the Government agreed at the time—that, in order to create an incentive for newspapers …
Accepted
L71 — Aggravated and Exemplary Damages
Recommendation: The Report of the Law Commission on Aggravated, Exemplary and Restitutionary Damages should be adopted in relation to its recommendations that legislation should provide that: (a) aggravated damages should only be awarded to compensate for mental distress and should have …
No response yet
No update 2+ yrs
L70 — Civil Justice Council Damages Review
Recommendation: The Civil Justice Council should consider the level of damages in privacy, breach of confidence and data protection cases, being prepared to take evidence (from the Information Commissioner, the media and others) and thereafter to make recommendations on the appropriate …
No response yet
No update 2+ yrs
L69 — Review of Damages for Media Torts
Recommendation: There should be a review of damages generally available for breach of data protection, privacy, breach of confidence or any other media-related torts, to ensure proportionate compensation including for non-pecuniary loss (all referable to the duration, extent and gravity of …
No response yet
No update 2+ yrs
L68 — PACE Amendments Consideration
Recommendation: The Home Office should consider and, if necessary, consult upon: (a) whether paragraph 2(b) of Schedule 1 to the Police and Criminal Evidence Act 1984 (PACE) should be repealed; (b) whether PACE should be amended to provide a definition of …
Words of: Home Office, Leveson Inquiry Report Recommendations: Home Office Response, deposited paper DEP2013-0290, 12 February 2013
Gov response: The Home Office accept this recommendation we will consult on the proposed changes to PACE before the end of this year (2013). The consultation exercise will specifically consider the potential impact of the recommended change …
Accepted
No update 2+ yrs
L67 — Sentencing Guidelines for Data Offences
Recommendation: On the basis that the provisions of s77-78 of the Criminal Justice and Immigration Act 2008 are brought into effect, so that increased sentencing powers are available for breaches of s55 of the Data Protection Act 1998, the Secretary of …
No response yet
No update 2+ yrs
L66 — ICO Organisation Review
Recommendation: The Information Commissioner's Office should take the opportunity to review its organisation and decision-making processes to ensure that large-scale issues, with both strategic and operational dimensions (including the relationship between the culture, practices and ethics of the press in relation …
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: As explained above the management structure and controls that we now have in place are very different from those that existed at the time of the events Lord Justice Leveson looked at in the greatest …
Accepted
L65 — ICO Specialist Knowledge Review
Recommendation: The Information Commissioner's Office should take the opportunity to review the availability to it of specialist legal and practical knowledge of the application of the data protection regime to the press, and to any extent necessary address it.
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: We have undertaken this review and recognise the need to have more specialist knowledge of the workings of the press and the application of the data protection regime to them.
Accepted
L64 — ICO Engage with Metropolitan Police
Recommendation: The Information Commissioner's Office should take immediate steps to engage with the Metropolitan Police on the preparation of a long-term strategy in relation to alleged media crime with a view to ensuring that the Office is well placed to fulfil …
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: The ICO fully accepts this recommendation. Section 10 of the ACPO Manual of Guidance (MoG) sets out the policy and procedure for investigations in relation to cases not involving the police. However, it does not …
Accepted
L63 — ICO Adopt DPP Guidelines
Recommendation: The Information Commissioner's Office should immediately adopt the Guidelines for Prosecutors on assessing the public interest in cases affecting the media, issued by the Director of Public Prosecutions in September 2012.
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: As noted above, the ICO had, by the time Lord Justice Leveson’s Report was published, already endorsed and adopted the CPS Guidelines for Prosecutors on assessing the public interest in cases affecting the media, issued …
Accepted
L62 — ICO Annual Report on Press
Recommendation: The Information Commissioner's Office, in the Annual Report to Parliament which it is required to make by virtue of section 52(1) of the Act, should include regular updates on the effectiveness of the foregoing measures, and on the culture, practices …
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: The ICO fully accepts the spirit of this recommendation. We will provide regular updates to Parliament on the effectiveness of the measures we are adopting in response to Lord Justice Leveson’s recommendations and more generally …
Accepted
L61 — ICO Advice for Data Subjects
Recommendation: In particular, the Information Commissioner's Office should take immediate steps to publish advice aimed at individuals (data subjects) concerned that their data have or may have been processed by the press unlawfully or otherwise than in accordance with good practice.
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: We understand the importance of ensuring that individuals are fully aware of their rights should they be concerned that their data has been or may have been processed by the press or other media organisations …
Accepted
L60 — ICO Public Guidance
Recommendation: The Information Commissioner's Office should take steps to prepare and issue guidance to the public on their individual rights in relation to the obtaining and use by the press of their personal data, and how to exercise those rights.
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: We recognise the importance of developing this guidance, which we will develop and publish in conjunction with the proposed Code of Practice mentioned above. We will also aim to have this guidance ready by the …
Accepted
L59 — ICO Good Practice Guidelines
Recommendation: In discharge of its functions and duties to promote good practice in areas of public concern, the Information Commissioner's Office should take immediate steps, in consultation with the industry, to prepare and issue comprehensive good practice guidelines and advice on …
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: We recognise the need for the ICO to prepare this guidance, based on the DPA as it currently stands. We also recognise the importance of consultation with the press and broadcasting industry.
Accepted
L58 — ICO Policy on Press Regulation
Recommendation: The Information Commissioner's Office should take immediate steps to prepare, adopt and publish a policy on the exercise of its formal regulatory functions in order to ensure that the press complies with the legal requirements of the data protection regime.
Words of: Information Commissioner's Office, The Information Commissioner's Response to the Leveson Report on the Culture, Practices and Ethics of the Press, 7 January 2013
Gov response: The ICO accepts this recommendation. We are now in the process of revising our Data Protection Regulatory Action Policy so that it specifically addresses how we will use our regulatory powers to ensure that the …
Accepted
L57 — Reconstitute ICO as Commission
Recommendation: The opportunity should be taken to consider amending the Data Protection Act 1998 formally to reconstitute the Information Commissioner's Office as an Information Commission, led by a Board of Commissioners with suitable expertise drawn from the worlds of regulation, public …
No response yet
In progress
L56 — ICO Consult with CPS
Recommendation: A new duty should be introduced (whether formal or informal) for the Information Commissioner's Office to consult with the Crown Prosecution Service in relation to the exercise of its powers to undertake criminal proceedings.
No response yet
L55 — ICO Prosecution Powers Extension
Recommendation: The prosecution powers of the Information Commissioner should be extended to include any offence which also constitutes a breach of the data protection principles.
No response yet
L54 — Bring into Force Section 55 Penalties
Recommendation: The necessary steps should be taken to bring into force the amendments made to section 55 of the Data Protection Act 1998 by section 77 of the Criminal Justice and Immigration Act 2008 (increase of sentence maxima) to the extent …
Words of: David Cameron, Prime Minister, statement to the House of Commons on the Leveson Inquiry report, 29 November 2012 (HC Deb vol 554 cols 446-448)
Gov response: I think we need to look at this very carefully. Lord Justice Leveson is incredibly tough about what he sees as the failures to act on the Information Commissioner’s report. We need to look very …
Noted
L53 — ICO Regard for Regulatory Membership
Recommendation: Specific provision should be made to the effect that, in considering the exercise of any of its powers in relation to the media or other publishers, the Information Commissioner's Office must have regard to the application to a data controller …
No response yet
L52 — ICO Balance of Public Interest
Recommendation: In conjunction with the repeal of those procedural provisions, consideration should be given to the desirability of including in the Data Protection Act 1998 a provision to the effect that, in considering the exercise of any powers in relation to …
No response yet
L51 — Repeal Procedural Provisions
Recommendation: The procedural provisions of the Data Protection Act 1998 with special application to journalism in: (a) section 32(4) and (5) (b) sections 44 to 46 inclusive should be repealed.
Words of: David Cameron, Prime Minister, statement to the House of Commons on the Leveson Inquiry report, 29 November 2012 (HC Deb vol 554 cols 446-448)
Gov response: In support of this, Lord Justice Leveson makes some important proposals. First, he proposes some changes to the Data Protection Act that would reduce the special treatment that journalists are afforded when dealing with personal …
Noted
No update 2+ yrs
L49 — Narrow Section 32 Exemption Scope
Recommendation: The exemption in section 32 of the Data Protection Act 1998 should be narrowed in scope, so that it no longer allows, by itself, for exemption from: (a) the requirement of the first data protection principle to process personal data …
Words of: David Cameron, Prime Minister, statement to the House of Commons on the Leveson Inquiry report, 29 November 2012 (HC Deb vol 554 cols 446-448)
Gov response: In support of this, Lord Justice Leveson makes some important proposals. First, he proposes some changes to the Data Protection Act that would reduce the special treatment that journalists are afforded when dealing with personal …
Noted
No update 2+ yrs
L48 — Section 32 DPA Amendment
Recommendation: The exemption in section 32 of the Data Protection Act 1998 should be amended so as to make it available only where: (a) the processing of data is necessary for publication, rather than simply being in fact undertaken with a …
Words of: David Cameron, Prime Minister, statement to the House of Commons on the Leveson Inquiry report, 29 November 2012 (HC Deb vol 554 cols 446-448)
Gov response: In support of this, Lord Justice Leveson makes some important proposals. First, he proposes some changes to the Data Protection Act that would reduce the special treatment that journalists are afforded when dealing with personal …
Noted
DM-10 — Custodial sentences for data protection offences
Recommendation: Given the potential seriousness of such offences, it is recommended that the Government take an early opportunity to amend the Data Protection Act 2018 to provide for sentences of imprisonment for offenders.
Words of: Home Office, Government response to the report of the Daniel Morgan Independent Panel (CP 857), presented to Parliament by the Home Secretary, 15 June 2023
Gov response: 2.4.7. In light of the Special Prosecutor’s conclusion that former DCS David Cook disclosed personal data in the sending of emails to a journalist, Michael Sullivan, the Panel recommended the introduction of custodial sentences for …
Not accepted
SP23 — Coroner and inquiry Ofcom notification powers
Recommendation: The Department for Science, Innovation and Technology should consider extending the powers under the Online Safety Act 2023 to enable Senior Coroners to make a notification to Ofcom to obtain access to social media accounts of perpetrators (not just of …
Words of: HM Government, Government Response to Phase 1 of the Southport Inquiry (CP 1623), presented to Parliament by the Home Secretary, 2 July 2026
Gov response: The Department for Science, Innovation and Technology (DSIT) is the lead department, with input from other government departments. Progress and next steps: - DSIT has initiated a review of the existing powers available to Senior …
Accepted
F244 — Common information practices shared data and electronic records
Recommendation: There is a need for all to accept common information practices, and to feed performance information into shared databases for monitoring purposes. The following principles should be applied in considering the introduction of electronic patient information systems: Patients need to …
Speaker not recorded. Source: Department of Health, Hard Truths: the Journey to Putting Patients First, volume 2 (Cm 8777-II), November 2013
Gov response: Accepted. There is both a need for common information practices that support the extraction of data to central systems to support improvements in data quality and service provision, and a need for electronic patient systems. …
Accepted
In progress
L78 — PNC Access Auditing
Recommendation: The Police Service should re-examine the rigour of the auditing process and the frequency of the conduct of audits in relation to access to the Police National Computer (PNC). Additional consideration should also be given to the number of people …
Words of: Department for Digital, Culture, Media and Sport, Government response to the consultation on the Leveson Inquiry and its implementation, 1 March 2018
Gov response: The Metropolitan Police Service, Her Majesty's Inspectorate of Constabulary and Fire & Rescue Services and the College of Policing have implemented or are implementing all of the Inquiry’s recommendations in relation to law enforcement. For …
Accepted
TAYL-F39 — Clubs maintain computer records of ticket purchasers' names and addresses
Recommendation: Clubs should consider maintaining a record on computer of ticket sales before the day of the match, for season tickets and tickets for all-ticket matches for seated areas, containing the names and addresses of those purchasing tickets.
Unknown