The ICO's £963,900 penalty for South Staffordshire Plc shows regulators now expect organisations to prove their controls, and a sovereign, air-gapped operating system with a signed audit record is how that proof gets built.
The ICO fined South Staffordshire Plc £963,900 on 12 May 2026 after 4.1 terabytes of data covering some 633,887 people surfaced on the dark web. We explain why provable accountability, evidenced by a signed, tamper-evident audit record held on your own hardware, is now the standard regulators expect.
Originally published on mickai.co.uk. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.
Top comments (0)