Member

In contrast, the ICO issued 28 reprimands to the public sector over the last financial year. Reprimands are written statements where the ICO expresses regret over an organisation’s failure to comply with data protection law, but they do not provide any incentive for change. A reprimand lacks legal force and organisations face no further consequences from one. Despite the fact that reprimands clearly lack deterrence, the ICO relies on them extensively and for serious violations of data protection laws.