On April 15, 2020, the Information Commissioner's
Office (ICO), the U.K.'s data protection authority, issued
further guidance on its regulatory approach during the
global COVID-19 pandemic. Following its March note that we
reported on, the ICO has confirmed that its approach "has
always been to be a pragmatic and proportionate regulator,"
adding that in the current public health emergency it will continue
to safeguard information rights in an "empathetic"
way.
The ICO's efforts during the pandemic will be focused
on the most serious challenges and greatest threats to the public.
The updated guidance states that the regulator will take firm
action against those seeking to exploit the pandemic through
misusing personal information or nuisance calls. In addition, the
ICO will assist frontline organizations in providing advice and
guidance on data protection laws. In recognition of the potential
economic and resource burdens that any regulatory actions may
impose, the