Information Commissioner's Office
Alert to help cross border privacy enforcement
The ICO has yesterday signed an agreement to be part of a new technical solution for international agencies involved in privacy enforcement, the GPEN Alert.
The GPEN Alert is intended to be a secure and confidential information sharing tool for Global Privacy Enforcement Network (GPEN) members.
Information Commissioner Christopher Graham said yesterday:
“It is clear that organisations’ use of data is getting ever more complicated, and ever more international.
“People need to know privacy authorities around the globe are watching over their information, and that policing of the rules doesn’t stop at a country’s border.
"The launch of the GPEN Alert today is an important practical step in achieving that, building on the international cooperation the GPEN network has developed. By providing a secure and confidential system, we hope it will prove a key tool in the future.”
The enforcement cooperation between the ICO and others can take a variety of forms; but until now it has proven challenging because it has been almost impossible to share information between authorities. Authorities need to ensure that any transfer is legally made, applying appropriate safeguards to protect the information being transferred. This means in particular that the information must be sent in a confidential and secure manner.
Initially, participating privacy enforcement authorities may use GPEN Alert to notify other member authorities of their privacy investigations and enforcement actions, specifically those that have cross-border aspects, for purposes of potential coordination or cooperation.
The Alert allows participating authorities to find out what other GPEN members are investigating or taking enforcement action against the same company, person or practices.
Information in the Alert system may be contributed and accessed only by GPEN member authorities that have signed a memorandum of understanding and whose relevant staff have appropriate security credentials. It does not currently allow sharing of detailed confidential, non-public enforcement matters, nor does it allow the sharing of consumer complaints relating to privacy.
The alert uses the existing Consumer Sentinel Network (CSN) platform operated by the US Federal Trade Commission (FTC). The GPEN Alert is separate from the rest of the CSN platform.
More information about GPEN is available at www.privacyenforcement.net
Latest News from
Information Commissioner's Office
ICO takes enforcement action against Experian after data broking investigation28/10/2020 12:25:00
The Information Commissioner’s Office (ICO) orders the credit reference agency Experian Limited to make fundamental changes to how it handles people’s personal data within its direct marketing services.
Blog: Simplifying subject access requests – new detailed SARs guidance22/10/2020 12:25:00
The right of access is a fundamental right under data protection law. And it has never been more necessary. In a world where personal data is used almost everywhere – by everyone – it’s vital that people have the right to be able to find out what’s happening to their information.
ICO fines British Airways £20m for data breach affecting more than 400,000 customers19/10/2020 12:25:00
The Information Commissioner’s Office (ICO) has fined British Airways (BA) £20m for failing to protect the personal and financial details of more than 400,000 of its customers.
Blog: Engagement key in protecting people’s privacy across the UK during the pandemic14/10/2020 12:25:00
Information Commissioner Elizabeth Denham highlights the positive results of the ICO’s engagement with the UK devolved administrations on the use of data in the fight against COVID-19.
ICO takes action against company for sending spam emails selling face masks during pandemic09/10/2020 12:25:00
A company that sent spam emails selling face masks during the pandemic has been fined £40,000 by the ICO and issued with an enforcement notice.
Statement on the outcome of the ICO’s compulsory audit of the Department for Education08/10/2020 09:10:00
The Information Commissioner’s Office (ICO) has published the outcome of a compulsory audit of the Department for Education DFE carried out in February 2020.
Blog: Elizabeth Denham on the conclusion of the ICO’s investigation into the use of personal data in political campaigning07/10/2020 09:10:00
There can be few cases that better illustrate how mainstream data protection has become than the ICO’s investigation into the use of personal data in political campaigning, including by the now defunct Cambridge Analytica.
ICO launches consultation on draft Statutory guidance02/10/2020 12:25:00
The Information Commissioner's Office (ICO) has launched a public consultation on its draft Statutory guidance, which details how it will regulate and enforce data protection legislation in the UK.