Claire Downes Web Development Services
Website build and alterations
We can work on new and existing websites and offer a fully bespoke design and build service
Do you need an online shop presence? Our experienced team can help you start selling in no time.
For when you need to keep in contact
Grow your business with social outlets
We can create custom logos to get your business noticed
A good website is nothing without good SEO, we can help with Google rankings
Domain & Email Registration
We provide full domain and email support
Our team can help with any imagery adjustments and creation your company require
Business Cards and Brochures
Stand out with our bespoke business cards and brochures
“Design is where science and art break even”
Not Sure what the best option is for your web presence?
Don’t worry if you’re not sure what the best options for you and your business might be, or if you have never commissioned web design services before.
We can give you guidance throughout the process, from the design and development of your website, to registering your Domain Name, all at very competitive prices.
We’d be delighted to have a chat with you to discuss your requirements.
2 Page Website
- 2 page static website with home/landing page
- Contact page.
- Basic SEO
- Basic Website with up to 5 static pages
- Contact page
- Basic Seo
CMS Website*our most popular package
- Content managed website
- Full backend access
- Contact page
- Basic SEO.
- Do you need to sell products online?
- We can help create your online store.
- Content managed system
- Stock control and other features
- Full training given.
- We can set up social media for your business
- Facebook/Twitter/Instagram/Pinterest ect
- Themed to match your branding
Social Media Upkeep Package
- Don’t have time for social networking?
- We can help run your social media for you.
- Packages available on request.
SEO & Design
- Bespoke SEO tailored for your site
Logo/Business Card Design
- Full logo design including revisions
- Business card design with your logo
- Do you need a banner for your website or other promotional media?
- We can create a bespoke banner based on your requirements.
- Brochure Design
- Bespoke Service
- Most formats available
Get Social with Us at Claire Downes Web Design Services
Equifax slapped with UK’s maximum penalty over 2017 data breach
Credit rating giant Equifax has been issued with the maximum possible penalty by the UK’s data protection agency for last year’s massive data breach.
Albeit, the fine is only £500,000 because the loss of customer data occurred when the UK’s prior privacy regime was in force — rather than the tough new data protection law, brought in via the EU’s GDPR, which allows for maximum penalties of as much as 4% of a company’s global turnover for the most serious data failures.
So, again, Equifax has managed to dodge worse consequences over the 2017 breach, despite the hack resulting from its own internal process failings after it failed to patch a server that was known to be vulnerable for months — thereby giving hackers a soft-spot to attack and swipe data on 147 million consumers.
Personal information that was lost or compromised in the 2017 Equifax breach included names and dates of birth, addresses, passwords, driving licence and financial details.
The UK data protection regulator is involved because up to 15 million UK citizens’ data was also breached in the attack. And while the hack compromised Equifax’s US systems, the UK citizens’ data was being processed in the US.
The UK’s Information Commissioner’s Office (ICO) said today that the UK arm of Equifax failed to take adequate steps to ensure its US parents was protecting this data.
Reporting the result of its investigation, the ICO said Equifax contravened five out of eight data protection principles of the Data Protection Act 1998 — including, failure to secure personal data; poor retention practices; and lack of legal basis for international transfers of UK citizens’ data.
“Equifax Ltd has received the highest fine possible under the 1998 legislation because of the number of victims, the type of data at risk and because it has no excuse for failing to adhere to its own policies and controls as well as the law,” said information commissioner Elizabeth Denham in a statement. “We are determined to look after UK citizens’ information wherever it is held.”
“The loss of personal information, particularly where there is the potential for financial fraud, is not only upsetting to customers, it undermines consumer trust in digital commerce. This is compounded when the company is a global firm whose business relies on personal data,” she added.
The regulator’s investigation, carried out in parallel with the UK’s financial regulator, the Financial Conduct Authority, revealed multiple failures at the credit reference agency.
The ICO says it found that measures that should have been in place to manage personal information were “inadequate and ineffective”, and there were also “significant problems” with data retention, IT system patching, and audit procedures.
It flags the fact that the US Department of Homeland Security had warned Equifax Inc about a critical vulnerability as far back as March 2017, noting that “sufficient steps to address the vulnerability were not taken meaning a consumer facing portal was not appropriately patched”.
“Many of the people affected would not have been aware the company held their data; learning about the cyber attack would have been unexpected and is likely to have caused particular distress,” added Denham, emphasizing the reasons for the ICO to issue the maximum possible penalty for the breach.
The ICO also recently issued Facebook with the same level of fine for allowing user data on up to 87 million Facebook users to be scraped by a third party app which used it to try to build voter targeting models, selling this as a service to a political consultancy involved in US elections.
“Multinational data companies like Equifax must understand what personal data they hold and take robust steps to protect it,” she continued. “Their boards need to ensure that internal controls and systems work effectively to meet legal requirements and customers’ expectations. Equifax Ltd showed a serious disregard for their customers and the personal information entrusted to them, and that led to today’s fine.”
Equifax has responded with disappointment to the ICO’s decision. In a statement responding to the ICO’s ruling, a company spokesperson said: “We have received the Monetary Penalty Notice from the Information Commissioner’s Office (ICO) on Wednesday afternoon and are considering the detailed points made. Equifax has cooperated fully with the ICO throughout its investigation, and we are disappointed in the findings and the penalty.
“As the ICO makes clear in its report, Equifax has successfully implemented a broad range of measures to prevent the recurrence of such criminal incidents and it acknowledges the strengthened procedures which are now in effect. The criminal cyberattack against our US parent company last year was a pivotal moment for our company. We apologise again to any consumers who were put at risk.
“Data security and combatting criminal digital activity is an ongoing battle for all organisations that requires continued innovation and attention. We have acted and continue to act to make things right for consumers. They will always be our priority.”
The company points to a number of changes it says it has made in response to the incident to strengthen its policies and processes, and also highlights ongoing investments in infrastructure and corporate governance procedures, including hiring additional IT staff, which are intended to improve the resilience of its systems to hack attacks.
However it does concede that the breach itself was the result of internal process failings, given that a file containing historical consumer information which should have been deleted was not.
And the key point here is that the ICO’s decision is based on scrutinising exactly what happened that led to the breach occurring.
How a company has acted since a security crisis will be taken into consideration, as part of the overall picture, but having shut the barn door after the horse has bolted is only going to get so much credit vs the reasons for the barn door not being properly secured in the first place. And that’s as it should be given the point of data protection legislation is to encourage companies to prioritize security, not overlook it.
In the Equifax decision the ICO writes: “The Commissioner has also taken into account her underlying objective in imposing a monetary penalty notice, namely to promote compliance with the DPA [data protection act]. She considers that, given the nature, seriousness and potential consequences of the contravention arising in this case, that objective would not be adequately served by an unduly lenient penalty.”
Equifax slapped with UK’s maximum penalty over 2017 data breach
See More Blog Entries
Look No Further. Get Started Today
A little about us
Having completed a degree in Computing and Internet Technologies (achieving a 1:1), I have gained years of experience in Web Development and have undertaken many varied projects, both large and small, from bespoke website design, eCommerce and marketing, newsletter creation, social networking, SEO, image manipulation, business card creation, business logos, organising a book signing tour and beta reading!
In my spare time I love spending time with my family, travelling, reading and researching wonderful new technologies to enrich our online presence!
Get In touch with Us
Little Orchard, Station Rd, Ansford, Castle Cary, Somerset BA7 7PD
*Please note: we may store your data in order to contact you. Your information will never be shared with third parties.