The U.K. Information Commissioner's Office, as well as private citizens, want to know that companies are practicing effective IT risk management programs that keep data fully protected.

Given such desires, according to lawyer Cameron Craig, the ICO may soon conduct data security audits across the country. That's what the data management expert wrote recently for a guest column appearing on Silicon.com.

Data security audits were addressed in the ICO's annual report, which was published earlier this month, Craig said. Specifically, the organization would like to carry out more of them to ensure proper data security is being practiced.

"It remains to be seen whether the Information Commissioner can convince private sector business that he will be using the carrot, and not the stick, when carrying out the audits," Craig wrote. "What is clear is that the pressure on the private sector business to be transparent in its approach to data protection compliance is unlikely to disappear."

Throughout this year, the ICO has cracked down on data breaches and poor data security practices. That has been evidenced by numerous fines issued by information commissioner Christopher Graham.