In May the UK Information Commissioner's Office (ICO) published guidance for Chief Information Security Officers and those responsible for data security.
Guidance entitled "protecting personal data in online services: learning from the mistakes of others".
The report relates to the seventh data protection principle of the UK Data Protection Act 1998 and describes eight frequently arising computer security issues in an online environment that relate to data protection, together with a summary of good practice for how to guard against each issue.
Each of the eight issues referred to above the ICO provides advice on what data protection problems might be caused, and good practice for avoiding those problems.
The report is useful in that it provides not only advice but also case studies and is the result of a number of years of practical experience that the ICO has had in investigating post data security events reported to the ICO.
This article was written by Robert Bond.
For more information contact Robert on +44 (0)20 7427 6660 or email@example.com