Small firms targeted by bogus 'compliance' schemes

Small businesses across the UK are being advised to ignore any correspondence they receive from companies claiming to regulate health & safety legislation, or requesting payment for data protection registration.

A number of bogus firms based in north-west England have recently contacted hundreds of UK companies, requesting payment in return for health & safety compliance registration.

The firms are asking for between £125 and £249 for their ‘services’.

However, Justin Mr McCracken, deputy director general of the Health and Safety Executive, advised that the HSE ‘never writes indiscriminately to firms seeking advance payment for services which it has not provided’.

Meanwhile, individuals posing as 'data protection collectors' are continuing to approach businesses, asking for payment in return for data protection registration.

Under the Data Protection Act 1988, all data controllers must, for a nominal fee, register their details with the Information Commissioner, unless they are exempt. The details are then entered onto a public register.

However, a number of bogus 'data protection enforcement agencies' are charging up to £135 for their 'registration' services.

Information Commissioner Richard Thomas has advised data controllers to ignore any approach made by such companies, and to inform the local police.

For more information on the official data protection registration requirements, visit the Information Commissioner’s website.