ICO consultation on Privacy Seal Scheme
The purpose of the consultation is to select an independent third party which will be entitled to award privacy/data protection compliance certificates to organisations which demonstrate that they comply with data protection law. The ICO hopes to select a scheme in early 2015, with a view to launch in 2016.
Respondents are asked to provide their views on the criteria that proposals for schemes will be assessed against. The consultation closes on 3rd October and more information can be found here.
Says Richard Lindsay, Director of Legal & Public Affairs, IPA: “Whilst agencies are unlikely to put their hats in the ring for selection as the new scheme provider, the announcement of the consultation is a timely reminder that all organisations, including agencies – and particularly those which process consumers’ personal data on behalf of their clients - should be doing what they can now to ensure that they are compliant with the Data Protection Act 1998. Although the draft EU Data Protection Regulation is still being negotiated in Brussels, it should come into force in the UK in some shape or form within the next few years and, whilst the text is still not settled, it is highly likely to be more prescriptive and more burdensome on organisations than the current law.”
The ICO have advised that organisations that make the effort to comply with the DPA now will find it much easier to make the step up to complying with the Regulation when it finally does arrive.
For guidance on how to comply with the Data Protection Act, visit the ICO’s website or ask the IPA Legal & Public Affairs team.
Last updated 26/09/2014