GDPR: One year on. Lenders account for 6% of UK data protection complaints

Maria Nikolova

From May 25, 2018 to May 1, 2019, the UK Information Commissioner’s Office received over 41,000 data protection concerns from the public.

Last May saw a serious shift in privacy and information rights with the implementation of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

The UK Information Commissioner’s Office (ICO) has published an update on the matter: “GDPR: One year on”. The purpose of this update is to reflect on the regulator’s experiences over the past year and share what it has learnt about the GDPR and its impact a year after its implementation.

The ICO received around 14,000 personal data breaches (PDB) reports from May 25, 2018 to May 1, 2019. For comparison, the regulator received around 3,300 PDB reports in the year from April 1, 2017.

The ICO closed over 12,000 of these cases during the year. Of these, only around 17.5% required action from the organisation and less than 0.5% led to either an improvement plan or civil monetary penalty. While this means that over 82% of cases required no action from the organisation, it demonstrates that businesses are taking the requirements of the GDPR seriously.

Greater awareness of individual rights has had a significant impact on the numbers of concerns raised with the regulator by the public. From May 25, 2018 to May 1, 2019, the ICO received over 41,000 data protection concerns from the public. The figure for 2017/18 was around 21,000.

Subject access requests remain the most frequent complaint category, representing around 38% of data protection complaints the ICO received. This is similar to the proportion before the GDPR (39%). In fact, the general trend is that all categories of complaint have risen in proportion with the overall increased number of complaints since the implementation of the GDPR.

The regulator notes that some sectors are responsible for higher numbers of breach reports and data protection concerns. The health sector, for example, accounts for over 16% of PDBs and 7% of data protection complaints. Local government accounted for 8% of PDBs and 9% of data protection complaints. Lenders accounted for 6% of data protection complaints.

EU Data Protection Board figures indicated that from May 25, 2018 to May 1, 2019, there were around 240,000 cases across the EU (data protection complaints, data breaches, proactive investigations or other similar issues). The ICO received over 55,000 of these (roughly 23%).

Where the data protection cases reported have cross-border implications throughout the EU, these are reported to a lead EU data protection authority. The UK is currently the lead supervisory authority on 93 of these cases.

In addition, the UK is working on behalf of UK citizens to uphold their information rights in 58 other cases where other EU data protection authorities are the lead supervisory authority, and the UK is a concerned supervisory authority.

Read this next

Digital Assets

Ripple and Lithuanian FINCI partner for XRP-based payments

Ripple is looking to expand its presence in Europe, forming a new partnership with Lithuanian electronic money institution FINCI.

Digital Assets enables Shopify merchants to accept crypto payments has integrated with Canadian e-commerce giant Shopify so global merchants can accept crypto payments and save on processing fees through cash-final settlements.

Institutional FX

FX volume drops 13pct at CLS Group in April 2022

FX settlement specialist CLS Group today reported that the executed volumes of currency trading on its platforms were notably down in April.

Crypto Insider, Opinion

Regulation: The Gold-Standard for Crypto-Assets

When the US supervisory authority SEC allowed an investment product referencing Bitcoin futures to be traded for the first time last October, this was widely perceived as a signal that cryptocurrencies had finally become established as an asset class.

Executive Moves

Solid hires FX industry veteran Darren Barker for multi-bank ECN’s business development

His curriculum vitae includes former roles at Cantor Fitzgerald, Sucden Financial, R.J. O’Brien, Jefferies, Natixis, Unicredit, J.P. Morgan, Raiffeisen, RBS International, UBS, Deutsche Bank, and Citi. 

Inside View

Mihails Safro, xpate CEO: Tips sellers need to know to overcome compliance obstacles

The unprecedented growth of e-commerce changed shopping dramatically last year. Many sellers suddenly faced a rapidly growing number of customers who had to stay home during the lockdown. When some clients adopted Netflix and Spotify as part of a daily routine, others ventured into online business. Robinhood alone saw a whopping 6 million rise in user numbers in 2 months. 

Institutional FX

BMLL delivers Level 3 data to Kepler Cheuvreux for order book analytics and algo performance

The solution covers more than 6.5 years of harmonised historical data from 65 venues and combines it with easy to use APIs and analytics libraries in a secure cloud environment. 

Digital Assets

Crypto Is An Invaluable Tool In The Fight Against Financial Oppression  

Crypto has proven itself to be much more than just a hot investment. Indeed, some say it’s poised to play a critical role in the future of finance

Executive Moves

Parameta appoints Head of Benchmark and Indices with a focus on ESG and rates

The firm said building out its benchmarks & indices offering will now be a core priority, with a particular focus on the ESG and rates space.