The UK 2007–2008 data protection fiasco: Moving on from bad policy and bad law?
Bibliographic record
Abstract
A number of commentators were not surprised when the news broke in November 2007 that the personal data of 25 million UK citizens had been lost. This is because Information and Data Protection Commissioners around Europe had been meeting and comparing notes every year for a quarter of a century, during which period the lack of privacy culture in both public and private sector organisations had long been noted. This lack of privacy culture is exacerbated by data protection laws often setting up relatively toothless watchdogs. The UK was a classic example of the minimalist approach to data protection with the Commissioner being required to give prior notice of inspections. The UK Commissioner had long lamented that his organisation simply did not have the teeth to carry out inspections without warning. Following the November fiasco, the UK Commissioner received a commitment from Government that his powers would be increased but is this enough? This paper explores the limitations of law in such circumstances and especially how, even if the law is adequate, policy priorities or mistakes may be such so as to deny a data protection authority effective teeth through more bad law as well as inadequate funding for resources.
Fetched live from OpenAlex and de-inverted. Abstracts are not stored in this database: the inverted indexes are 8.6 GB of the frame’s 9.3 GB of text, and the host has 13 GB free.
How this classification was reachedexpand
Full frame machine prediction
Teacher imitationNot calibrated prevalence, not ground truth. Human validation pending. The Gemma side is a direct model label for every work in the frame, read from the title-only record. The Codex side is a classifier learned from the 10,348 direct Codex labels and calibrated to design-weighted sample rates; fields without enough sample support carry no Codex call. Candidate is the union of the two sides; consensus is their intersection. These outputs are machine_predicted_unvalidated and are not human labels.
Distilled classifier scores by category (both heads)
| Category | Codex | Gemma |
|---|---|---|
| Metaresearch | 0.021 | 0.083 |
| Meta-epidemiology (narrow) | 0.000 | 0.001 |
| Meta-epidemiology (broad) | 0.001 | 0.001 |
| Bibliometrics | 0.002 | 0.004 |
| Science and technology studies | 0.009 | 0.016 |
| Scholarly communication | 0.018 | 0.013 |
| Open science | 0.002 | 0.005 |
| Research integrity | 0.026 | 0.024 |
| Insufficient payload (model declined to judge) | 0.008 | 0.002 |
Machine scores (provisional)
The two teacher heads of the student model, read on this work. A score orders the frame for review; it never asserts a category, and the validation status ships verbatim with every row.
Baseline scores from an immature model (maturity gate not passed, 7 training rounds). Scores rank; they never assert a category.
score_only:v0-immature-baseline · verbatim from the scoring run: score_only means the number may rank works, and no category label ships from itClassification
machine, unvalidatedMachine predicted; a candidate call from one source (direct Gemma or distilled Codex), not a consensus.
How this classification was reached, model by model and score by score, is at the end of the page under "How this classification was reached".