Reprimands · General business
Recruitment company reprimand
No fineReprimands
Root cause
Other or unclassified
The published notice did not contain enough detail to classify a single root cause.
What happened
The Information Commissioner (the Commissioner) issues a reprimand to a recruitment company in respect of infringements of Article 5(1)(f) and 32(1)(b) of the UK GDPR. The organisation misconfigured a storage container, containing 12,000 records and relating to 3,000 workers, to be publicly accessible without any requirement to authenticate.
Summarised from the notice published by the ICO on 9 August 2023. Read the original notice — it is the authoritative version.