News
Print Article

Guernsey data protection regulator has teeth and uses them (£80k time !!!!)

03/09/2020

Sure has been fined £80,000 after publishing a number of "mistakes and inaccuracies" in the most recent Guernsey phonebook - including numbers that should have been ex-directory.

Hundreds of customer complaints were made, with a total of 244 inaccurate numbers.

The Office of the Data Protection Authority believes that number may be higher than recorded, however, as Sure relied on customers themselves to highlight any mistakes.

Sure confirmed there were 119 entries in the directory which shouldn't have been published, with 19 customers being flagged as at-risk of potential harm as a result.

The telecoms company claimed the mistakes were down to changes it made to both the format of the directory and the information in it, following the implementation of the Data Protection Law.

The ODPA opened an inquiry in October last year, which found that Sure had failed to specify how personal data would be processed for the new directory, and hadn't carried out a Data Protection Impact Assessment before implementing changes.

The Authority said it was "apparent" that the company "did not appreciate the potential impact on certain data subjects" and noted how it had rejected customer requests to recall and re-publish the paper version of the directory.

"The fact that paper copies of the directory including the inaccurate and/or ex-directory information continue to be in circulation and/or are accessible and/or available means that the duration of the breach is extended for the duration such directories are in circulation," a spokesperson for the ODPA said.

"In so far as the processing of data is unfair or involves inaccurate data, then such issues persist in relation to the paper copies. Steps could have been taken to reduce the impact."

40,000 copies of the free phonebook were distributed across the Bailiwick.

In May this year, following the inquiry, Sure was issued with a breach determination notice and the ODPA decided a fine would also be appropriate.

"Data subjects could suffer damage as a result of the wrongful publication of telephone numbers, addresses or other personal data," a spokesperson for the ODPA said. "The same is also true of inaccurate information published.

"The harm/damage suffered by the affected data subjects as a result of the inaccurate information and/or ex-directory information being published either could include or does include financial loss, distress, inconvenience and similar other adverse effects."

However, Sure has said it is "disappointed and surprised" by the Authority's decision, reached following a "flawed and unfair" investigation process.

"[The inquiry] included a lack of full disclosure about the specific matters of concern to the ODPA, which in turn made it difficult for us to participate meaningfully with the process," a spokesperson for the company said.

"From our initial review of the ruling we disagree profoundly with the findings of the ODPA's investigation, some of which were not put to us during the investigation and some of which are, in our opinion, factually incorrect. As such, we are now considering the ruling in detail before we formally respond."

Sure said it gave all customers the opportunity to check their entries before the directory was printed.

"We understand that the directory plays a necessary role in keeping the island community connected which is why we've chosen to feature an historic image on the 2020/2021 cover to commemorate the 75th anniversary of the Bailiwick's liberation, which we are looking forward to sharing with the community soon."

The telecoms company has until the end of the month to pay the £80,000 fine, unless it chooses to appeal the decision in the Royal Court within 28 days.

https://www.bailiwickexpress.com/jsy/news/sure-fined-80000-data-protection-breach/?utm_medium=email&utm_campaign=Bailiwick%20Express%20News%20-%20JERSEY%20EDITION&utm_content=Bailiwick%20Express%20News%20-%20JERSEY%20EDITION+CID_fd120b7dff21d6ba157e25a5e08779d9&utm_source=Email%20marketing%20software&utm_term=Read%20more#.X1DUYXlKiUl

GUERNSEY

The Team

Meet the team of industry experts behind Comsure

Find out more

Latest News

Keep up to date with the very latest news from Comsure

Find out more

Gallery

View our latest imagery from our news and work

Find out more

Contact

Think we can help you and your business? Chat to us today

Get In Touch

News Disclaimer

As well as owning and publishing Comsure's copyrighted works, Comsure wishes to use the copyright-protected works of others. To do so, Comsure is applying for exemptions in the UK copyright law. There are certain very specific situations where Comsure is permitted to do so without seeking permission from the owner. These exemptions are in the copyright sections of the Copyright, Designs and Patents Act 1988 (as amended)[www.gov.UK/government/publications/copyright-acts-and-related-laws]. Many situations allow for Comsure to apply for exemptions. These include 1] Non-commercial research and private study, 2] Criticism, review and reporting of current events, 3] the copying of works in any medium as long as the use is to illustrate a point. 4] no posting is for commercial purposes [payment]. (for a full list of exemptions, please read here www.gov.uk/guidance/exceptions-to-copyright]. Concerning the exceptions, Comsure will acknowledge the work of the source author by providing a link to the source material. Comsure claims no ownership of non-Comsure content. The non-Comsure articles posted on the Comsure website are deemed important, relevant, and newsworthy to a Comsure audience (e.g. regulated financial services and professional firms [DNFSBs]). Comsure does not wish to take any credit for the publication, and the publication can be read in full in its original form if you click the articles link that always accompanies the news item. Also, Comsure does not seek any payment for highlighting these important articles. If you want any article removed, Comsure will automatically do so on a reasonable request if you email info@comsuregroup.com.