The Information Commisssioners Office has released a series of Data Protection best practice notes aimed at small businesses.
Speaking at the Privacy and Data Protection conference Richard Thomas, Information Commissioner, said:
"In an age where the risk of identity fraud is increasing these findings are of considerable concern. Individuals are regularly urged to protect their personal information but businesses, large and small, also have a responsibility to ensure their customers' information is secure and accurate. Businesses must take this responsibility seriously.
"By following these simple principles small businesses can ensure they provide an effective customer service. The guidance outlines a number of key factors which small and medium sized businesses should consider when training their staff to handle personal information properly.
"The majority of businesses are complying with the Act but my Office will not, and does not, hesitate to take action against the few businesses which are failing to protect their customers' personal information effectively."
The notes can be downloaded in PDF format from the ICO website