Home News Small businesses to be fined for security breaches
Small businesses to be fined for security breaches
Wednesday, 07 April 2010 05:56
66% of all UK data breaches come from small companies, who could now be fined up to £500K. 66% of all UK data breaches come from small companies, who could now be fined up to £500K.

Small businesses across the UK could now be fined up to £500,000 in the event of a data security breach as new powers for the Information Commissioner’s Office (ICO) came into force on 6 April.

Under the new rules, the ICO will be able to fine businesses up to £500,000, equivalent to 10 per cent of the highest annual turnover of a small company, if they lose individuals' confidential data.

Previously the ICO had the power to fine just £5,000 for serious breaches of the Data Protection Act, but these new measures are expected to act as an effective deterrent to improve data security within the UK economy.

These new powers have been welcomed as a sign of progress for UK data protection, but small businesses are warned that, as fraud persists, they must be vigilant as they are often the most vulnerable targets for information thieves.

Robert Guice, Executive Vice President of data destruction company Shred-it, commented, “With fraud on the rise, information security is more important than ever for businesses looking to protect their financial standing and corporate reputation."

"These new measures highlight the urgent need for small businesses to invest in data security practices that protect their employees’ and clients’ confidential information," he said.

"Small businesses in particular make easy targets for data theft. While larger companies have resources dedicated to protecting the security of their data, small businesses don't always have the means or knowledge needed to effectively manage the threat. Small businesses who neglect the need for good and robust management of their confidential data will now pay a high price," warned Guice.

In January, information security and forensic computing consultancy 7Safe released its UK Security Breach Investigations Report 2010, which revealed that the majority (66 per cent) of data security breaches that occurred in the UK over the past 18 months came from small companies employing less than 100 people.

According to the research, 80 percent of attacks on data came from sources external to the organisation, while 18 per cent came from business partners.

Guice continued, "Without doubt, data breaches affect businesses of all sizes, but many small business owners simply aren’t taking the necessary steps to create ongoing data security policies and practices, including training their employees."

Guice advised small firms to make employee education a top priority to help avoid unnecessary data breaches occurring as a result of human error. "Invoices, company reports, payroll data, customer lists and even customer complaints are all highly confidential and need to be destroyed or securely stored," he said.

He advised that setting out clear guidelines for employees as to which documents should be seen as confidential, will prevent leaks of this kind from occurring.

"In the longer term, strengthening online security and implementing a secure document destruction programme are the safest ways to ensure all sensitive corporate information is secure, therefore avoiding data security breaches, and of course the fines which may result," added Guice.

For small businesses looking to protect themselves and their customers against fraud, the following guidance is offered:

  • Ensure all employees clearly understand the consequences to the business if a data breach were to take place
  • Confidential material exists in all parts of the business and includes payroll, client lists, invoices, and complaint letters. The simplest way to determine what is confidential and not confidential is to destroy everything related to the company, its employees and customers
  • Ensure that all employees are suitably background checked
  • Only collect essential data from customers and ensure that customers give their explicit consent for this data to be collected
  • Limit access to confidential data by handling this information on a ‘need to know’ basis and keeping a record of which individuals have access to confidential information
  • Consider fitting locks, alarms and CCTV cameras where appropriate in areas where confidential information is stored.

Related news items:
Newer news items:
Older news items:

 

Technology

Image
Choosing a hosting company for your business
Monday, 20 May 2013
A web host is there to ensure that your customers are able to use your site safely 24 hours a day, 365 days of the year. Read more...

Sponsored Articles

Image
Boosting your business broadband speed
Tuesday, 05 March 2013
Top tips to help you boost your broadband speed. Read more...

Management

Image
Is hot-desking the future for small businesses?
Friday, 17 May 2013
There are shared workspaces springing up at business centres all over the capital. Read more...

Economy

Image
Want a successful company? Relocate to London
Wednesday, 15 May 2013
Why the capital should be the city of choice for any SME looking for fast and sustainable growth. Read more...

Finance

Image
We need a new breed of bank
Tuesday, 23 April 2013
Why you can’t teach an old banker new tricks and why a new breed of bank and banker is required. Read more...

Marketing

Image
Is sales all about luck?
Monday, 13 May 2013
What people label as luck might be something else. Read more...
               

Your are currently browsing this site with Internet Explorer 6 (IE6).

Your current web browser must be updated to version 7 of Internet Explorer (IE7) to take advantage of all of template's capabilities.

Why should I upgrade to Internet Explorer 7? Microsoft has redesigned Internet Explorer from the ground up, with better security, new capabilities, and a whole new interface. Many changes resulted from the feedback of millions of users who tested prerelease versions of the new browser. The most compelling reason to upgrade is the improved security. The Internet of today is not the Internet of five years ago. There are dangers that simply didn't exist back in 2001, when Internet Explorer 6 was released to the world. Internet Explorer 7 makes surfing the web fundamentally safer by offering greater protection against viruses, spyware, and other online risks.

Get free downloads for Internet Explorer 7, including recommended updates as they become available. To download Internet Explorer 7 in the language of your choice, please visit the Internet Explorer 7 worldwide page.

Google Analytics Alternative