Businesses can also become victims of corporate identity fraud. Shockingly 79% of businesses make no effort to destroy the sensitive material that they throw away or are preparing to recycle.
Incredibly, companies are not just risking their own identities but also those of their customers and their employees.
40% of businesses risk their client’s identities by throwing away sensitive customer information without due care which can include home addresses, phone numbers and photocopies of passports - all of which can be used by a criminal to steal a person’s identity (survey commissioned by Fellowes).
From 1 October 2009 a new notification fee of £500 will apply to some large organisations to register as a data controller.
The new rate applies to data controllers with a turnover of £25.9 million and 250 or more members of staff. The new £500 rate also applies to public bodies with 250 or more members of staff.
All other data controllers will remain in the lower tier category, paying £35 per annum unless they are exempt. Registered charities and small occupational pension schemes will not come into the higher tier, regardless of their size and turnover, and will remain in the lower-tier unless exempt from the requirement to notify altogether.
By law organisations that process personal information must notify the Information Commissioner’s Office. An entry about each organisation – including details about the information it processes – is made public in the Register of Data Controllers. The new fee structure will enable the ICO to increase activity, for instance audits and investigations, to help protect personal information and ensure compliance with the Data Protection Act.
There has not been any change to the notification fee level since the Data Protection Act 1998 was introduced in 2000.