Root cause
Failure on individual rights
Subject access requests ignored or answered late, or people prevented from exercising their data rights.
21
UK enforcement actions
£5,440
in penalties
5
sectors affected
Where it happens
- Local government9
- Criminal justice6
- Health3
- Central government2
- Political1
Every case
- The Commissioner of Police for the City of London A reprimand has been issued to The Commissioner of Police for the City of London (COLP), after it failed to meet its data protecti…
- South Wales Police We issued an enforcement notice to South Wales Police (SWP) over serious delays in handling subject access requests (SARs). Our in…
- Jason Blake The director of a care home in Bridlington, Yorkshire, has been fined for refusing to respond to a request for a resident’s person…
- London Borough of Hammersmith and Fulham We issued a reprimand to the London Borough of Hammersmith and Fulham after hidden data within a spreadsheet was inadvertently dis…
- Greater Manchester Police Due to historic outstanding requests Chief Constable Greater Manchester Police had continually failed to meet its data protection …
- Glasgow City Council A reprimand was issued to Glasgow City Council as during the period between 01 April 2023 to 01 March 2024, they responded to 45% …
- City of Edinburgh Council A reprimand was issued to City of Edinburgh Council as during the period between 01 January 2023 to 31 December 2023, it had faile…
- United Lincolnshire Teaching Hospitals NHS Trust A reprimand was issued to United Lincolnshire Teaching Hospitals NHS Trust as during the period between 01 March 2021 to 31 March …
- Southend-on-Sea City Council We issued a reprimand to Southend-on-Sea City Council in Essex after hidden data on a spreadsheet released as part of a freedom of…
- The Labour Party The Labour Party were issued with a reprimand for failing to respond to people’s request for their own personal data, also know as…
- University Hospital of Southampton NHS Foundation Trust A reprimand is being issued to University Hospital of Southampton NHS Foundation Trust as they have only responded to 59% of incom…
- Chief Constable Devon and Cornwall Police Chief Constable Devon and Cornwall Police have continuously infringed Article 12(3) of the UK GDPR and Part 3, Chapter 3, Section …
- Chief Constable Dorset Police Chief Constable Dorset Police have continuously infringed Article 12(3) of the UK GDPR and Part 3, Chapter 3, Section 54 of the DP…
- London Borough of Lewisham During the period of 3 January 2022 to 3 January 2023, 35% of subject access requests (SARs) that London Borough of Lewisham recei…
- Plymouth City Council A reprimand has been issued to Plymouth City Council in relation to the infringements of Article 12 (3) and Article 15 of the UK G…
- London Borough of Lewisham The London Borough of Lewisham has been served with an Enforcement Notice as a result of the evidence seen by the Commissioner abo…
- Chief Constable of Kent Police From October 2020 to February 2021, Kent Police received over 200 SARs, 60% were completed during the statutory deadline. However,…
- London Borough of Lambeth London Borough of Lambeth has only responded to 74% of the SARs it has received within the statutory timescales from 1 August 2020…
- Secretary of State for the Home Department (Home Office) A reprimand has been issued to the Home Office following investigations that showed between March 2021 and November 2021, they had…
- Ministry of Defence The MoD has been issued with a reprimand following an identified SAR backlog dating back to March 2020. Despite setting up a recov…
- London Borough of Croydon From April 2020 to April 2021, the London Borough of Croydon Council responded to less than half of their SARs within the statutor…