< Back to previous page

Code of Conduct 'could cut commercial litigation risk'

Published on 3 Jun 2009 under category: legal

A new code of conduct for companies dealing with personal information has been launched, which could minimise the risk of organisations committing professional negligence.

The British Computer Society and the Information Security Awareness Forum have released the Personal Data Guardianship Code in order to improve the methods firms use, Out-Law.com reports.

William Malcolm, a data protection lawyer, says that the new guidance is muddled and, while being an alternative approach, is nothing new.

He states: "Individuals should be given as much control as is possible … this means giving them clear information about this when they provide their personal data and seeking their consent where this is appropriate."

Mr Malcolm tells the website that in many cases companies do not need to obtain this as long as they notify the subject that their information is being processed.

Recent figures published by BSI show that 18 per cent of small and medium-sized enterprises are not sure whether they have breached the Data Protection Act.