...however the ICO will also take a dim view of companies seeking to exploit the public health emergency.
The ICO has released guidance on its enforcement approach during the coronavirus crisis. It will take a more understanding approach to companies which experience delays in responding to data breaches, data subject rights requests and investigations. The crisis will also be taken into account when determining enforcement action and fines.
The ICO anticipates that its more sympathetic approach will remain relevant for many months to come.
Of course, this is not a licence for non-compliance – rather, the ICO emphasises that they will be taking an empathetic and pragmatic approach, applying flexibility in the context of their regulatory response. The ICO themselves will also be focusing their response on the most serious challenges and greatest threats to the public.