Root cause
Other or unclassified
The published notice did not contain enough detail to classify a single root cause.
40
UK enforcement actions
£13.03m
in penalties
10
sectors affected
Where it happens
- Criminal justice10
- Health7
- Unspecified6
- General business5
- Central government5
- Local government3
- Education and childcare1
- Land or property services1
- Finance insurance and credit1
- Online technology and telecoms1
Every case
- Qonain Hussain A former insurance claims advisor has been sentenced for unlawfully accessing personal injury claim records.
- AFK Letters Co Ltd It was found that between January and September 2023, AFK made 95,277 spam calls resulting in several complaints being made to the…
- AFK Letters Co Ltd It was found that between January and September 2023, AFK made 95,277 spam calls resulting in several complaints being made to the…
- Greater Manchester Police We issued a reprimand to Greater Manchester Police for failing to ensure that appropriate technical or organisational measures wer…
- Money Bubble Ltd EN It was found that between October – November 2022, the company made 168,852 spam calls resulting in several further complaints bei…
- Money Bubble Ltd MPN It was found that between October – November 2022, the company made 168,852 spam calls resulting in several further complaints bei…
- Quick Tax Claims Limited An ICO investigation revealed that Quick Tax Claims Limited had sent 7,863,547 unlawful text messages over the course of a month, …
- Quick Tax Claims Limited An ICO investigation revealed that Quick Tax Claims Limited had sent 7,863,547 unlawful text messages over the course of a month, …
- Chelmer Valley High School Chelmer Valley High School have been issued a reprimand in respect of Article 35(1). The school failed to complete a Data Protecti…
- Clyde Valley Housing Association Clyde Valley Housing Association have received the following reprimand because of an infringement that occurred in July 2022 when …
- Home Office An enforcement notice and a warning have been issued to the Home Office for failing to assess the privacy risks posed by the elect…
- Dover Harbour Board A reprimand is being issued to Dover Harbour Board in respect of the creation and use of a social media distribution group, initia…
- Chief Constable of Kent Police A reprimand is being issued to Kent Police in respect of an incident in February 2021 when a Kent Police officer took a photograph…
- Mayor’s Office for Policing and Crime (MOPAC) Within the London.gov.uk website, there was a webform to contact the London Victims’ Commissioner as well as other webforms. Betwe…
- South Tees Hospitals NHS Trust The reprimand was issued as the South Tees Hospitals NHS Trust (the Trust) was found to have not ensured that its staff were fully…
- Bank of Ireland BOI failed to ensure the accuracy of customers’ default loan status which led to inaccurate personal data being held on their acco…
- Charnwood Borough Council Reprimand issued for the disclosure of the new address of the data subject to an ex-partner who was the alleged perpetrator of dom…
- University Hospital of Derby and Burton NHS Trust (UHDB) UHDB failed to have adequate processes in place, especially when processing special category data, which resulted in referrals for…
- Police Service of Northern Ireland (PSNI) PSNI failed to have appropriate measures in place to prevent unlawful sharing of personal data including criminal data with the Un…
- Chief Constable West Mercia Police and Chief Constable Warwickshire Police On 21 June 2021 West Mercia Police and Warwickshire Police erroneously decommissioned a server containing a Warwickshire Police ap…
- Ministry of Justice The Information Commissioner (the Commissioner) issues a reprimand to the Ministry of Justice (the MoJ) in accordance with Article…
- Recruitment company reprimand The Information Commissioner (the Commissioner) issues a reprimand to a recruitment company in respect of infringements of Article…
- Executive Office On 22 May 2020, the Interim Advocate’s Office sent a newsletter by email to 251 subscribers on its mailing list using the ‘To’ fie…
- Thames Valley Police The Information Commissioner (the Commissioner) issues a reprimand to Thames Valey Police (TVP) in accordance with Schedule 13(2)(…
- TikTok Information Technologies UK Limited and TikTok Inc (TikTok) The Information Commissioner’s Office (ICO) has issued a £12,700,000 fine to TikTok Information Technologies UK Limited and TikTok…
- University Hospitals Dorset NHS Foundation Trust The Information Commissioner (the Commissioner) issues a reprimand to University Hospitals Dorset NHS Foundation Trust (the Trust)…
- Sussex Police In June 2020, the ICO became aware that staff members across both Sussex Police and Surrey Police had access to an app that record…
- Surrey Police In June 2020, the ICO became aware that staff members across both Sussex Police and Surrey Police had access to an app that record…
- University Hospitals Bristol and Weston NHS Foundation Trust Patient records were saved on to an Electronic Document Viewing System. The Trust decided to terminate the use of this system and …
- NHS Blood and Transplant The Commissioner has decided to issue NHSBT with a reprimand in accordance with Article 58 of the GDPR, after they inadvertently r…
- Metropolitan Police Service MPS was unable to ensure that sensitive criminal records were not able to be uploaded correctly to the Police National Database (P…
- Royal Free London NHS Foundation Trust Hysteroscopy scans were saved on to a series of three USB sticks over a period of nine years from May 2013 until the remaining two…
- Secretary of State for the Home Department On 5 September 2021 an envelope containing four documents classified 'Official Sensitive' (the Documents) was found at a venue in …
- Wakefield Council A reprimand was issued after the Council sent papers prepared as a Court bundle, in relation to Child Protection Legal Proceedings…
- National Crime Agency The exception reports were to highlight where the work of the RPA could not be completed and manual officer intervention was requi…
- Jackson Quinn Jackson Quinn was representing two children in relation to step-parent adoption proceedings at the family court. The case was list…
- Secretary of State for the Home Department (Home Office) A Home Office employee contacted members of the public as part of the creation of an education programme for staff into the histor…
- Direct Clothing Co. (UK) Limited On 19 August 2021, Direct Clothing Co. (UK) Limited (DCCUK) were contacted by a customer who advised that their payment card had b…
- Department of Health and Social Care The ICO has issued the DHSC with a reprimand in relation to data protection compliance matters under the General Data Protection R…
- Epsom and St Helier University Hospitals NHS Trust incorrect test result data was passed by Epsom & St Helier University Hospitals NHS Trust (the Trust) to Public Health England (PH…