Ofqual found that 9% of teachers in England see senior leadership as primarily responsible for cyber security, while 46% name the IT team. The regulator says backups and response plans belong to leaders, a duty most staff assign elsewhere.
Reality
- Evidence50
- Adoption55
- Hype gap+10
- Incentives35
- Confidence50
Dyfed-Powys Police says a cyberattack identified on September 14 may have exposed staff data at a force of more than 2,000 officers and staff. Online and email contact is back in service while investigators establish whether the attackers reached any staff records.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence60
The CRM provider says its logs cannot identify which objects were accessed, and volume comparison suggests the whole database left. One AWS key became a sector-wide notification problem.
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence65
The page that sets out how UK processors must contract with controllers and authorise sub-processors now says it may change under the Data (Use and Access) Act. The duties on it apply meanwhile, and the revision timetable sits elsewhere.
Publishers:cy.ico.org.uk
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap0
- Incentives40
- Confidence72
France's data regulator has fewer than 10 workplace complaints about smart glasses on file and says a recording light is not adequate notice on its own. Companies are already asking it whether they can ban the glasses at the door.
Reality
- Evidence52
- Adoption61
- Hype gap+18
- Incentives58
- Confidence47
Its contracts and third parties section asks AI buyers to decide and record controller, processor or joint controller roles across the whole supply chain, and it warns that the guidance is under review after the Data (Use and Access) Act.
Publishers:ico.org.uk
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap+10
- Incentives32
- Confidence72
The ICO counts cookie compliance among the country's most visited websites, while Swansea researchers tested 624 licensed gambling sites against a different measure, and the enforcement record in that sector runs to a single reprimand.
Reality
- Evidence57
- Adoption68
- Hype gap+19
- Incentives62
- Confidence56
City of London Police recorded a 417% rise in account-hack losses to £6.3m in the year to March. The arithmetic underneath it shows the average loss per victim halving as small cases got recorded for the first time.
Reality
- Evidence62
- Adoption74
- Hype gap+14
- Incentives58
- Confidence66
The party would swap the UK GDPR for a New Zealand-style law that caps penalties at NZ$50,000, and its press release says Brussels would keep waving British data through without explaining why that holds.
Reality
- Evidence56
- Adoption14
- Hype gap+44
- Incentives74
- Confidence52
A one-sheet complaint about an unemptied bin now arrives as 19 to 27 pages of citations, and the UK association of local government lawyers reckons absorbing that would take double the staff it now assigns.
Reality
- Evidence28
- Adoption46
- Hype gap+24
- Incentives62
- Confidence34
A dev.to guide reads the 2024-25 ICO record as a demonstrability test: over 12 million pounds in fines landed on breached organisations that could not show their controls. The arithmetic lands in the backlog.
Reality
- Evidence36
- Adoption
- Insufficient
- Hype gap+31
- Incentives
- Insufficient
- Confidence34
The regulator found inconsistent data protection compliance across the forces it audited, and says significant improvements are still needed, including for street stops using operator initiated matching.
Reality
- Evidence52
- Adoption58
- Hype gap+14
- Incentives55
- Confidence55