EP NowEP StoreAcademySupportCommunityProducts by Country
Legal & Compliance Home

ICO Fines Charity £10,000 for UK GDPR Breach

According to the ICO, the charity failed to apply appropriate organizational and technical security measures to its internal email systems.
July 9, 2022
Blue graphic with map of UK and title ICO fines charity for GDPR breach

On 22 October 2021 the Information Commissioner’s Office (ICO) fined an HIV charity £10,000 for a breach of the UK GDPR. According to the ICO, the charity failed to apply appropriate organizational and technical security measures to its internal email systems.

This decision - which comes just three months after the ICO fined another charity £25,000 for a sensitive data breach - provides key takeaways for production companies.

What happened?

In February 2020 the charity sent an email to 105 people using the CC function instead of the BCC function. This meant that the email addresses - 65 of which identified the recipients by name - were visible to all recipients.

Because of the nature of the email and the charity, the breach could lead to assumptions about individuals’ HIV status or risk (so while the email addresses themselves didn’t constitute special category data, special category data (relating to the recipients’ health) could be inferred).

The breach was identified immediately and the message was recalled, but it was impossible to determine how successful this was. The charity reported the incident to the ICO on the day it happened.

ICO’s decision

Although the charity had some organizational and technical security measures in place, the ICO decided that these weren’t enough.

In particular, the ICO found that the charity didn’t have a specific policy on the secure handling of personal data (instead, employees relied on the charity’s Privacy Policy, a public document which covered topics such as cookie use and data subject access rights).

The ICO also found that while the charity had procured a system which allowed bulk messages to be sent more securely seven months earlier, it hadn’t started using this and was continuing to use email.

Key takeaways for productions

This decision has a number of key takeaways for production companies: 

  • The ICO is continuing to crack down on organizations which don’t have sufficient safeguards in place to protect people’s data, particularly special category data.
  • It’s important to have an appropriate data protection policy in place which focuses on your team’s handling of personal data. 
  • Individuals who handle personal data (particularly special category data) should be trained on how to do so before they’re given access to the data. 
  • The use of email for sensitive communications can leave you exposed to a data breach. Messaging systems which include functionality for sending messages more securely can help to reduce the risk of information being shared with the wrong people. 
  • It’s important to be aware of the dangers of collecting special category data via email. This includes health data (eg, vaccination data) and diversity data. 

For more information on how to secure your production data, check out our guide to information security.

Topic: UK

Related Content

ICO Issues 4.4M Penalty

ICO Warns Against Complacency as it Hands Out £4.4M GDPR Penalty

11/16/2022
The Information Commissioner’s Office (ICO) imposes hefty penalty for failing to protect employee personal...
Topic: Security
More
Blue graphic with map of UK and title ICO penalty following ransomware attack

ICO issues £98,000 penalty following ransomware attack

7/13/2022
Information Commissioner’s Office (ICO) imposed penalty on a leading UK law firm for breaching the UK...
Topic: UK
More
uk-gdpr-compliance-for-productions

UK GDPR Compliance for Productions: Q&A with Sheridans

5/4/2022
Special category data, liability, data transfers and reporting - Sheridans answer your questions on the UK...
Topic: UK
More
Joe Francis-EP International-Lyndsay Duthie-PGGB-Alison Small-Netflix

UK Film and TV Industry Gathers at Inaugural PGGB Talent Showcase for Prestigious HRH The Earl of Wessex Award

2/2/2023
More than 250 film and TV industry figureheads, newcomers, students, educators and skills bodies gathered...
EP Newsroom-Thumbnail-PGGB

Entertainment Partners and Netflix pledge £500K ($616K) to new PGGB Talent Development Fund

1/26/2023
Entertainment Partners and Netflix have each pledged £250k ($308k) to form a new £500k ($616k) Production...

7 Things Production Finance Teams Need to Know for Budgeting in 2023

1/25/2023
Mark Hammond, VP of International Finance & Ops, shares some of the key factors production finance teams...
EP Newsroom-Thumbnail-PGGB

6FT From The Spotlight Wins Inaugural Earl of Wessex Award at PGGB Talent Showcase

1/25/2023
Film and TV industry charity 6ft From the Spotlight were awarded The Production Guild of Great Britain’s...

Entertainment Partners and Netflix Pledge £500K ($608K) to New PGGB Talent Development Fund

1/25/2023
Production Guild of Great Britain (PGGB) Talent Development Fund will support the development and...

New Union Agreement for Engaging Crew on UK HETV Takes Effect

1/20/2023
Pact/Bectu 2023 agreement makes a number of key changes to the terms and conditions for engaging crew.
Topic: UK
More
Master Series square Thumbnail Pact Bectu Agreement

Understanding the New Pact/Bectu TV Drama Agreement 2023

1/12/2023
Your comprehensive overview of the new Pact/Bectu TV Drama Agreement and how key changes will impact...
Topic: UK
Watch
Virtual Production

The UK Invests in Virtual Production as Content Boom Continues

1/10/2023
The UK is doubling down on Virtual Production infrastructure; learn how and why they’re leading the charge...
Topic: UK
More
Doctor Strange

9 Hollywood Blockbusters Actually Filmed in the UK

12/27/2022
Major US studios are taking advantage of what the UK has to offer, and clever set design and special...
Topic: UK
More

UK Production Incentives All Producers Should Know About

11/17/2022
Don't miss out on the UK's tax incentives, special programs, and national and regional funding...

Behind the Boom: Why the UK is a Hotspot for Production

11/17/2022
Explore the generous industry incentives, talent, and infrastructure available to productions filming in...

Three Mistakes That Can Slow Down Your Production Payroll (And How to Avoid Them)

11/11/2022
Stay compliant with UK rules and regulations, and get your crew and talent paid on time, with these...
UK Govt backtracks on growth plan

UK Government Backtracks on Growth Plan: What it Means for Production

10/18/2022
Former UK Chancellor Kwasi Kwarteng was replaced by Jeremy Hunt after 38-day run, and policies reversed in...
Topic: UK
More
UK Court Issues Warning for Personal Data at Work

UK Court Issues Warning for those with Access to Personal Data at Work 

10/12/2022
UK Coventry Magistrates’ Court fines a former health adviser £3,000 for unlawfully accessing personal data...
Topic: UK
More
Changes to UK Pensions Act

Proposed Changes to the UK Pensions Act Could Impact Production Budgets

10/12/2022
Reintroduced bill seeks to give UK government the power to extend pensions auto-enrollment to young and...
Topic: UK
More
UK Gov Growth Plan

Mini Budget; Big Changes: What the UK Government’s Growth Plan Means for Production 

10/12/2022
UK Chancellor Kwasi Kwarteng announces new Growth Plan (aka the “mini budget”) and a big shake up of the...
Topic: UK
More
Changes to UK right to work checks

Important Changes to UK Right to Work Checks

9/20/2022
On September 30, 2022 the UK rules around right to work checks will change. Here’s what productions need...
Topic: UK
More
Los Angeles Times logo-sq

Hollywood production in U.K. soars to record levels as crews complain of burnout

8/22/2022
Spending on film and high-end television shoots reach record-breaking amounts as production activity...
Compliant crew contracting panel-square

Compliant Crew Contracting in the UK

8/1/2022
Learn how to ensure your crew contracts are compliant with UK regulations and why the Production Portal is...
Topic: UK
Watch
Cabinet Office fined for disclosing addresses

Cabinet Office Fined £500,000 for Disclosing Addresses of High-Profile Individuals

7/9/2022
The Information Commissioner’s Office (ICO) has fined the Cabinet Office £500,000 for accidentally...
Topic: UK
More

Payroll & Finances

PayrollResidualsSmartStartNew SmartTimeProduction PortalEP On LocationSmartAccountingEP LiveSmartPOCASHétPayPaymaster Rate GuideEP Residency

Manage Multiple Productions

AssetHubSmartHubSmartHub Vault
Subscribe now

Be an industry insider with EP's
newsletters and alerts

LegalPrivacy NoticeSecurity
© 2023 Entertainment Partners. All rights reserved.