Institutions falling to report data security breaches which subsequently come to light could face heavy financial penalties as the Information Commissioner's Office (ICO) is granted new powers. As of April 6 2010 fines of up to £500'000 can be imposed for serious breaches of the Data Protection Act. The ICO has issued new practical guidance to assist in reducing breaches following analysis of all reported data breaches over the past two years. Institutions are urged to act responsibly when things go wrong or face costly sanctions. For more information and guidance please visit www.ico.gov.uk