DPA Archives - Measured Collective

ICO investigation leads to sentence for unlawful council-record access: what employers should do

Scott Dooley — Tue, 28 Jul 2026 07:12:04 +0000

A new ICO case is a useful reminder that personal-data risk is not limited to phishing, lost devices or external attackers. On 21 July 2026, the ICO announcement reported that a former Herefordshire Council employee received a suspended prison sentence after unlawfully accessing sensitive records. For employers, the practical lesson is to make sure staff ...

The post ICO investigation leads to sentence for unlawful council-record access: what employers should do appeared first on Measured Collective.

London Clinic ICO caution: what staff medical-record misuse teaches employers

Scott Dooley — Thu, 18 Jun 2026 07:20:18 +0000

The ICO has issued a formal caution to a former healthcare professional after concluding a criminal investigation linked to medical information reported by the London Clinic in March 2024. For employers, the point is direct: insider misuse of personal data can become a criminal data protection matter even when the organisation itself is not fined. ...

The post London Clinic ICO caution: what staff medical-record misuse teaches employers appeared first on Measured Collective.

UK Government Advances Facial Recognition Rollout — What This Means for Privacy Compliance

Scott Dooley — Sun, 26 Apr 2026 08:49:30 +0000

UK live facial recognition expansion raises data protection concerns. What managers should watch as police biometrics use widens in 2026.

The post UK Government Advances Facial Recognition Rollout — What This Means for Privacy Compliance appeared first on Measured Collective.

Indiana Consumer Data Protection Act — What Managers Need to Know in 2026

Scott Dooley — Sun, 26 Apr 2026 08:49:27 +0000

Indiana Consumer Data Protection Act (INCDPA) is now in force from January 1, 2026. What managers must do now to comply.

The post Indiana Consumer Data Protection Act — What Managers Need to Know in 2026 appeared first on Measured Collective.

Reddit Fined £14.47m by ICO for Children’s Privacy Failures — 2026

Scott Dooley — Sun, 26 Apr 2026 08:49:23 +0000

Reddit fined £14.47m by ICO for children's privacy failures under GDPR and DPA 2018. What this means for your organisation.

The post Reddit Fined £14.47m by ICO for Children’s Privacy Failures — 2026 appeared first on Measured Collective.

EDPB Launches 2026 Coordinated GDPR Enforcement on Transparency – What Teams Need to Prepare

Scott Dooley — Sun, 26 Apr 2026 06:41:27 +0000

The EDPB's 2026 coordinated enforcement action targets GDPR transparency. Learn what HR, marketing, and compliance teams should check now.

The post EDPB Launches 2026 Coordinated GDPR Enforcement on Transparency – What Teams Need to Prepare appeared first on Measured Collective.

EU AI Act Prohibited Systems Ban Takes Effect — What HR and Compliance Teams Need to Know

Scott Dooley — Sun, 26 Apr 2026 06:41:20 +0000

The EU AI Act's prohibited systems ban is now in force. Here's what HR and compliance teams need to know about banned AI tools and next steps.

The post EU AI Act Prohibited Systems Ban Takes Effect — What HR and Compliance Teams Need to Know appeared first on Measured Collective.

UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare

Scott Dooley — Wed, 04 Feb 2026 02:40:15 +0000

The UK’s Data (Use and Access) Act 2025 (DUAA) comes into force on 5 February 2026. Before you worry about urgent compliance work, here’s the good news: in most cases, you probably don’t have anything that needs immediate action. The reason is straightforward. Unlike regulatory changes that impose stricter requirements, the DUAA generally makes the ...

The post UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare appeared first on Measured Collective.

ICO’s Public Sector Approach: Why the Post Office Received a Reprimand Instead of a £1m Fine

Scott Dooley — Wed, 31 Dec 2025 12:34:02 +0000

In December 2025, the ICO concluded its investigation into a data breach that exposed personal information belonging to 502 victims of the Post Office Horizon scandal. After considering a fine of up to £1.094 million, the regulator instead issued a reprimand under its “public sector approach” policy. The decision has drawn sharp criticism from privacy ...

The post ICO’s Public Sector Approach: Why the Post Office Received a Reprimand Instead of a £1m Fine appeared first on Measured Collective.

ICO fines Care Home Director for Deleting Data: The Warning Every Manager Should Read

Scott Dooley — Mon, 08 Sep 2025 12:53:28 +0000

On 3 September 2025, Jason Blake, 56, director of Bridlington Lodge Care Home in Yorkshire, was ordered to pay £1,100 in fines and £5,440 in costs after being found guilty of failing to respond to a data subject access request (DSAR). The case is a rare criminal prosecution for DSAR non-compliance. The Facts In April ...

The post ICO fines Care Home Director for Deleting Data: The Warning Every Manager Should Read appeared first on Measured Collective.

How the Data Protection and Digital Information Bill could change marketing in the UK

Scott Dooley — Sat, 16 Jul 2022 12:51:13 +0000

The UK government recently published the outcome of their consultation on the Data Reform Bill (now known as the Data Protection and Digital Information Bill) – a collection of sweeping policy changes “designed to make the UK the best place for businesses and scientific institutes to undertake data-driven activity”.

The post How the Data Protection and Digital Information Bill could change marketing in the UK appeared first on Measured Collective.