"A 13-week sanction for the first instance of non-compliance and 26 weeks for the second 'transgression' is very punitive," she says.
It identified three instances of non-compliance with how it held data.
Government lawyers have admitted in responses to Privacy International that between 1 June 2014 and 9 February this year, "47 instances of non-compliance either with the MI5 closed section 94 handling arrangements or internal guidance or the communications data code of practice were detected".
"As demonstrated in these documents, once compliance incidents were discovered in the telephony metadata collection program, additional checks, balances, and safeguards were developed to help prevent future instances of non-compliance".
In 67% of these instances of non-compliance, women experienced a caesarean birth.
In total, more that 260 instances of non-compliance with environmental legislative and regulatory requirements were identified in the 35 facilities.
Eighty percent of incidents were characterized by privilege level changes (increases or decreases) in the month prior, while just over half were preceded by one or more documented instances of non-compliance with the privilege level.
On 7 August, 2015, the company was notified again of being subject to fixed penalty in case of non-compliance".
This institution is also the sanctioning authority in case of non-compliance to the rules.
"Agencies responsible for inspection have no meaningful recourse in the case of non-compliance," he said.
In case of non-compliance, a significant penalty will be imposed on the company.
