ICO – Change of Deadline for Reporting Breach Notifications for Communication Service Providers
On 20 January 2023 the UK’s Information Commissioner’s Office (“ICO”) published a statement regarding the obligations then in place for public electronic communications service providers (“CSPs”) under Regulation 5A of the Privacy and Electronic Communications Regulations 2003 (“PECR”). The statement proposed the termination of the 24-hour data breach regime (which required CSPs to notify the…