30 April 2013 – 01 June 2013: One new undertaking, two follow-up review of previous undertakings and one prosecution

Two follow-up reviews have been conducted by the ICO, relating to undertakings previously given by two separate entities, to give the ICO assurance that they have appropriately complied with the previous undertakings given to the ICO. One undertaking was given in respect of compliance with the seventh data protection principle. There has also been one prosecution under s55 of the Data Protection Act, for unlawfully obtaining sensitive medical data.

Please see attached Enforcement Table for more details of the enforcement actions.

Click here to view table.