Pubs will be faced with a data protection nightmare under the new track and trace system2020欧洲杯体育投注开户, lawyers have warned, with the possibility that data breaches could lead to six-figure fines.
2020欧洲杯体育投注开户This has prompted widespread concern about information ending up in the wrong hands and also about the risks of hacking and data breaches.
Five-figure fines for individuals and six-figure fines for larger companies found to have breached General Data Protection Regulation (GDPR) laws are likely, according to Magnus Boyd, a privacy lawyer and partner at Schillings.
2020欧洲杯体育投注开户"There'll be a commercial advantage for those pubs that have the right systems," Mr Boyd said. "Breweries that run a series of pubs could have a dedicated server but, where they can't, people are going to be relying on pen and paper or forms.
"The ultimate sanction is a fine and I can see, in some circumstances, those fines being hefty or appearing to be fairly hefty to people.
"If it was a nationwide brewery that collected everybody's data and then did a dodgy mailshot, you could be looking at in the hundreds of thousands."
2020欧洲杯体育投注开户Mr Boyd warned that the UK could see repeats of events in Germany and New Zealand where pubs have retained data to chase those who failed to pay or even made inappropriate advances towards customers.
2020欧洲杯体育投注开户"Just by virtue of the numbers involved, there's going to be some bad apples," he said. "Human nature tells us that there'll be some acts of bad faith in all of this."
He said additional pressures will come through landlords needing to train staff in securely retaining data. If owners failed to notify the Information Commissioner of a breach, that in itself could entail a fine.
"Profits are going to be low, so this is a particular sector of the economy that is being squeezed from two directions at the same time," he said.
"There will be much lower profits and, with GDPR in play, a very sudden increase in their operating costs."
While there is no single format in which pubs are required to store customer information, it must be destroyed after 21 days.
It is thought older and independent pubs could find compliance harder.
In the GDPR framework, businesses can be charged up to 20 million euros (£18.1 million), or up to four per cent of their global turnover, for "exploitative" data breaches.