Data security guidelines updated to reflect new law

24-May-2012

Data security guidelines updated to reflect new law

New data security guidelines for producers and crew members have been agreed between Pact, the BBC, ITV, Channel 4, Five and S4C. The guidelines have also been translated into Welsh for the first time by S4C.

The new guidelines reflect changes in the regulatory environment since their introduction in 2010. And the Information Commissioner’s Office (ICO) has also added its input to the new guidelines.

A catalyst for the updated guidance is new European legislation on data protection regulation. In particular, the new law affects cookies – a text file that is placed on a user’s terminal equipment, containing certain information about an individual, their preferences and more.

The EU legislation arose following concerns about ‘behavioural advertising’ and the ‘cookies law’ was implemented into UK legislation in 2011. The ICO gave UK businesses a ‘sunset’ period for compliance with the law, but the ICO will enforce the legislation from 26 May 2012.

S4C’s Welsh translation will also give the guidelines wider reach.

Pact Chief Executive, John McVay, said: “It’s vital for producers and the rest of the industry that these important guidelines are up to speed with changes, especially technological changes. Producer data protection guidelines have been amended, in particular the statutory code of practice for data sharing, to cover the use of online tracking tools such as cookies.

“S4C’s Welsh translation also demonstrates the growing support for a best practice standard in broadcasting. We must all stay on top of data protection, especially now that the appropriate management of personal information is a matter of general public awareness.”

The ICO has also reviewed and commented on the amendments, highlighting the importance of the guidelines in the industry.

The Information Commissioner’s Office’s Group Manager for Business and industry, David Evans, said: “We are always keen that industry develops its own guidelines on data protection. First of all it gives us some comfort that legal obligations are being paid more than lip service, and second that good practice advice is set out in a way that industry understands and can buy into.

“The industry guidelines that have developed fit that bill and we appreciate the opportunity to have some input.”
ENDS