Reprimands
Post Office Limited
No fineReprimands
Root cause
Unlawful disclosure
Personal data published or shared with people who had no right to see it, including failures to redact.
What happened
On 25 April 2024, Post Office Limited (POL) uploaded an unredacted copy of a legal Settlement Deed to its corporate website instead of the intended redacted version. The Settlement Deed contained the personal data of 502 claimants who were part of the 2017 group litigation brought against POL which exposed the Horizon IT Scandal.
Summarised from the notice published by the ICO on 2 December 2025. Read the original notice — it is the authoritative version.