UNITED KINGDOM

UK review of counter-terrorism legislation

Home Secretary Theresa May has announced a review of current counter-terrorism and security powers to address their balance with civil liberties. Lord Ken Macdonald QC will provide independent oversight of the review that will include looking at the use of the Regulation of Investigatory Powers Act 2000 (RIPA) by local authorities and access to communications data.

Click here to view the statement

Law Society updates data protection practice note

The Law Society has revised its practice note on data protection to reflect the new financial penalties for non-compliance and changes to the fee structure for notification. The note explains how solicitors must comply with the Data Protection Act 1998.

Click here for practice note

ICO Annual Report launched

The Information Commissioner's Office has published its annual report covering the period April 2009 to March 2010. Data protection cases have risen by 30% and Freedom of Information cases by 20% over the last year. The ICO has reduced a backlog of FOI complaints and has closed more than 39% more cases than in 2008/09.

Click here for annual report

EUROPE

Article 29 Working Party finds current implementation of data retention directive unlawful

In a landmark announcement, EU data protection officials have found that the manner in which Member States have implemented their data retention obligations is unlawful. The EU Data Retention Directive compels all ISPs and telecommunications service providers operating in Europe to retain telecom and internet traffic data concerning their customers' communications for a period of at least 6 months and up to 2 years. The working party's report highlights a number of areas where service providers are breaching the Directive.

Click here for announcement

Reding calls for data protection authorities to be strengthened

European Data Protection Authorities have met with Viviane Reding, the EU's Justice Commissioner, to discuss the review of the data protection framework. Reding indicated that the role of data protection authorities should be strengthened and that they should have the necessary sanction and enforcement powers. She also stressed the need to have one legal framework on data protection at EU level, which would ensure a high level of protection for individuals, regardless of where their data is being processed.

Click here for announcement

'Accountability' principle should be added to Data Protection Directive

The Article 29 Working Party has published an opinion (WP173) advising that the European Commission should introduce a 'statutory accountability principle' as part of the review of the Data Protection Directive.

Click here for opinion

INTERNATIONAL

Visa clarifies its rules on credit card data

Visa has clarified its rules on the retention of credit card data to prevent unnecessary storage of sensitive credit card information. The joint statement with the National Retail Federation (US) makes it clear that banks and issuers should allow merchants to present a truncated, disguised or masked card number on receipts to reference a transaction.

Click here for press release

SeCure

SeCure is Addleshaw Goddard's unique, holistic and pragmatic approach to information management for organisations who have suffered an information breach or who may be concerned about their potential exposure. SeCure seeks to minimise risk and the impact of information losses on an organisation's business, through three interdependent approaches, addressing the commercial and legal requirements at each stage of the information management cycle.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.