Amongst many other things, there is the much maligned Data Protection Act which, as well as the HRA, generally isn't understood that well and tends to get mis-represented on more occasions than I care to consider.
So what does the Data Protection Act mean to those of us with little to no legal training: well, there is an expectation that personal and sensitive data that is stored by companies and other institutions is kept safe, only accessed by those with a need to know, for relevant purposes.
After all, you wouldn't want Tesco trying to access how much is in your bank account so that they could try and decide what offers they make to you in the next clubcard mailing!
So, just what happens if there is a breach?
Firstly, you need to be aware of it. Chances of that are slim unless you write to every institution that has information of you and request access to your file, and then there may be a chance of being declined if
a.) The data officer doesn't know what they are doing.
b.) One of the legal reasons why they can't grant you access to some / all of your information.
It was somewhat refreshing to see that HMRC have noted how many staff were dismissed for what amount to breaches of the Data Protection Laws see story here
Of course, I'm not happy to see this information as someone has lost their job, someone has had their data accessed unlawfully etc. but it is good to see something being done once a breach had been committed and it has made HMRC look like they are taking this matter seriously, which considering their current track record can only be a good thing.
And then it made me think of the whole ID card situation (which as a liberal AND member of Liberty I'm not exactly the biggest fan of.) But, there is a method to my madness.
The ID cards will hold loads of different pieces of information biometric and personal and will also be held in a database as well as the little chip on your card.
This database will be controlled by a private company that has been contracted by the government. So, who will police this database, how can we be promised that it will be as strictly controlled as it ought to be when it isn't actually going to be run by the government, and just how safe will your information, which let's face it will be a lot more precious than your Tax Code in the long run, really be?