Module 4 · Chapter 10

ICO Enquiries, Fines and Who Pays After a Breach

After a breach is reported, the regulator may ask questions, give orders or fine. This chapter shows how a supplier answers it, what its powers are, and who pays for the harm in the end.

≈ 7 min read 8-question test

In this chapter

  • How a supplier answers the regulator’s letter after a breach
  • What the regulator can order, and how high its fines can go
  • Who pays a care worker’s compensation in the end

10.1After a breach in one paragraph

A breach does not end when it is reported. The ICO, the data protection regulator, may then ask how it happened. It can order answers and impose fines. A person whose data was shown may also claim money for the distress.

The Data Processing Agreement decides two things here. It says who hears first when the ICO writes, and who repays whom for the harm.

Key point

The ICO can question and fine a processor, not only the controller. The Agreement settles who hears first, and who repays whom.

Also in this chapter

  1. Answering the regulator’s letter
  2. What the regulator can order
  3. How high a fine can go
  4. Who pays the care worker in the end
  5. Your job

Preview

The rest of this chapter opens with a free account. Every edition is free to read until 31 January. Open a free account by the end of that day and keep every edition published by then, for good. Open it from the edition home →