£500K data breach fines not enough

The ICO's Jonathan Bamford defended the fines at a privacy event in London

The recently sanctioned fine of £500,000 for organisations that fail to protect individuals' data is not enough, according to a poll undertaken by the Information Commissioner's Office (ICO) at a privacy event Tuesday.

The ICO was granted the power to levy the fine in April, in an attempt to limit personal data security breaches and promote compliance with the Data Protection Act. However, nearly 70 per cent of attendees at the Fine Balance event on Tuesday said that the amount is too low.

The 55 delegates hailed from central government, lobbying groups, academia, the technology industry, the scientific community and the press.

The event was organised to discuss how privacy can be protected in an increasingly digital society, and was the fourth to be held since 2005.

Jonathan Bamford, head of strategic liaisons at the ICO, recognised that the fine could be too low for large institutions such as banks, but could be perceived as too high for small businesses.

"People expect that collection of their personal information is a part of modern life, but at the same time it makes them uneasy, and they do expect safeguards to be there to protect them," he said during the conference keynote.

"I do not want a situation where we have to use bigger sticks, but by God am I prepared to use them."

Bamford referred to ICO data collected last year in an effort to understand what the public sees as the government's top social priorities.

Preventing crime was top of the list, but protecting personal information was second and was considered a more important priority than unemployment, the NHS and national security.