The Data Protection Commissioner has prosecuted its first ever case under the Data Protection Act. Oxford Learning College has been fined £1000 at the Magistrates Court for failure to comply with a request for information.
Earlier this year, Oxford Learning College failed to provide an individual with the information that was being held about him. During an investigation initiated by the GRA, it was found that Oxford Learning College had deleted those details, putting themselves in a situation where they could no longer comply with the requirements of the Data Protection Act.
Paul Canessa, said that, “Whilst the role of the Data Protection Commissioner is to ensure compliance”, it was decided to prosecute the company in view that this specific matter could not be resolved.
The case highlights the importance of complying with data protection requirements. With the law set to change in May next year, with the introduction of the General Data Protection Regulation. The Data Commissioner calls on local companies to start to identify areas that could cause issues in order to be able to ensure compliance with the new law.
Source: Gibraltar News