The U.K. Information Commissioner’s Office fined Equifax 500,000 GBP for the credit-monitoring firm’s 2017 data breach. The ICO conducted an investigation with the Financial Conduct Authority, finding Equifax violated five out of eight data protection principles of the Data Protection Act 1998, including failure to secure personal data and subpar data retention practices. “We are determined to look after UK citizens’ information wherever it is held,” Information Commissioner Elizabeth Denham said. “Equifax Ltd has received the highest fine possible under the 1998 legislation because of the number of victims, the type of data at risk and because it has no excuse for failing to adhere to its own policies and controls as well as the law.”
Full Story