Data Protection in a Common Law System the UK Experience

1
Data Protection in a Common Law System the UK
Experience

• David Smith
• Deputy Information Commissioner

2
UK Legal System

• No written Constitution
• Common law framework
• Duty of confidence
• International Convention obligations
• No general right of privacy

3
Data Protection Foundations

• Public concern at impact of computers on privacy
• Younger and Lindop Reports
• Council of Europe Convention No 108
• OECD guidelines
• Data Protection Act 1984

4
Data Protection Act 1984

• Registration
• Data Protection Principles
• Individual Rights
• Data Protection Registrar
• Enforcement
• Transfer Prohibition Notices

5
Case Law

• Data Protection Tribunal
• Community Charge/Poll Tax
• Direct Marketing
• Credit Reference Agencies

6
Data Protection Act 1998

• Implemented Directive 95/46/EC
• Application to manual records
• Introduced criteria for processing
• Special categories of data
• Rules on transfer to third countries
• Many detailed provisions

7
Case Law

• Political marketing
• National security
• Retention of police records
• Media cases
• Impact of Human Rights Act
• Durant v Financial Services Authority
• Impact of Freedom of Information law

8
The Supervisory Authority

• Data Protection Registrar
• Data Protection Commissioner
• Information Commissioner
• Independent of Government
• Funded from fees

9
ICO Functions

• Promotion of good practice
• Complaints and enquiries
• Notification
• Enforcement
• Educating and influencing
• International cooperation

10
ICO Strategy

• Minimising data protection risks
• Compliance with law not an end in itself
• Benefiting from enlightened self interest
• Keeping freedom of choice
• Helping get it right
• Being selective to be effective
• Building public confidence

11
Our Climate

• Better regulation agenda
• UK data breaches
• Surveillance society concerns
• On political agenda
• New powers, penalties and fees for ICO

C. Chris Slane
12
ICO Mission

• Promoting public access to official information
  and protecting your personal information

13
www.ico.gov.uk