This page contains video content. To view the video, you need to have javascript turned on and view the page using a Flash player. Install or update the Adobe Flash Player by using the button below.
Alternatively, you can view the video content in mpeg format:
Or download the text transcript:
Enforcement Careers
Part of the Operations Directorate, our Enforcement team deals with a variety of Freedom of Information and Data Protection cases. Primarily, we educate organisations on their obligations and explain to individuals what their access rights are. However, there are times when organisations don't comply with the law and we need to step in.
Looking at the impact on information rights, we decide whether to pursue the case – from getting organisations to correct mistakes through to seizing computers, sanctioning covert investigations and working with the police. We do all we can to resolve complaints before legal action is necessary but we do follow cases through to a prosecution or monetary penalty.
When we do investigate criminal cases, they require a different approach, appropriate to the severity of the offence. Our video case study offers more insight into some of our work.
What skills do we look for?
Our casework team are good communicators with a flair for investigation and analysing large volumes of information. Working with a variety of teams, they enjoy the satisfaction of helping people and resolving complaints. Whilst being prepared to ask searching questions and challenge what organisations say. Here every day is different. So if you believe in protecting data security in a high-tech age, this is the career challenge you've been looking for.
People working on criminal cases also need to be familiar with the strict rules associated with conducting this type of investigation, which we provide training on.
We know how to take managed risks
We take our regulatory role very seriously. A breach of the law can be devastating for individuals and leave their personal information exposed. So our role is to decide when and how to take formal enforcement action.
Most action is only taken when a complaint can't be resolved informally. However, we do intervene earlier if a serious matter comes to light via other routes, such as following up on media reports. As many organisations are required to tell us if there is a data breach, we also take action where they have consistently failed to comply with their obligations, or where their failure could cause significant detriment to individuals.
Our decisions are guided by the Commissioner's Regulatory Action Strategy. We have the power to take serious action through prosecutions, fines and 'stop now' orders. And as well as being high profile, our team are investigating more cases than ever before.
Careers in Enforcement
Based in Wilmslow, the Department has both enforcement action and criminal case teams. There is also a legal presence to provide vital specialist advice.
Our people were involved in every aspect of this high profile case study of The Consulting Association.
