The ICO’s take on ‘effective, proportionate and dissuasive’ GDPR enforcement action

Privacy Laws & Business UK Report, Issue 122, July 2022

The ICO’s draft policy on fines looks to improve transparency and consistency. By adopting a 9 step approach, the ICO promises to calculate financial penalties that will be fair and consistent, but also dissuasive. The data reform in the UK aims to improve the accountability principle under the GDPR, making more flexible and risk-based, although the future of data protection enforcement in the UK remains unpredictable.