Sector
Criminal justice
30 published enforcement actions against organisations in criminal justice, totalling £816,000 in penalties.
30
enforcement actions
£816,000
total penalties
2
carried a fine
How this sector fails
- Other or unclassified12
- Failure on individual rights6
- Unlawful disclosure5
- Unlawful direct marketing5
- Misdirected communication1
- Lost device or paper record1
Every action
- Metropolitan Police Service The Information Commission has issued a combined Reprimand and Enforcement Notice to the Metropolitan Police Service following fin…
- Metropolitan Police Service The Information Commission has issued a combined Reprimand and Enforcement Notice to the Metropolitan Police Service following fin…
- Chief Constable Commissioner for the Metropolis/ Metropolitan Police Service (MPS) Incident 1 (ICO Ref: INV/0034/2025), concerning the service of unredacted documents in support of a Stalking Protection Order appl…
- Chief Constable Commissioner for the Metropolis/ Metropolitan Police Service (MPS) Incident 1 (ICO Ref: INV/0034/2025), concerning the service of unredacted documents in support of a Stalking Protection Order appl…
- Suffolk Constabulary Suffolk Constabulary has been issued with a Reprimand, after sensitive personal data became inadvertently disclosed within Excel s…
- Norfolk Constabulary Norfolk Constabulary has been issued with a Reprimand, after sensitive personal data became inadvertently disclosed within Excel s…
- The Commissioner of Police for the City of London A reprimand has been issued to The Commissioner of Police for the City of London (COLP), after it failed to meet its data protecti…
- Police Service of Scotland The Information Commissioner's Office (ICO) has fined the Police Service of Scotland £66,000 and issued a Reprimand for serious fa…
- South Wales Police We issued an enforcement notice to South Wales Police (SWP) over serious delays in handling subject access requests (SARs). Our in…
- South Yorkshire Police A reprimand has been issued to South Yorkshire Police for failing to ensure it had appropriate technical security and organisation…
- Greater Manchester Police Due to historic outstanding requests Chief Constable Greater Manchester Police had continually failed to meet its data protection …
- Greater Manchester Police We issued a reprimand to Greater Manchester Police for failing to ensure that appropriate technical or organisational measures wer…
- Police Service of Northern Ireland The Police Service of Northern Ireland has been fined £750,000 for infringing Articles 5(1)(f), 32(1) and (2) of the UK GDPR betwe…
- Dover Harbour Board A reprimand is being issued to Dover Harbour Board in respect of the creation and use of a social media distribution group, initia…
- Chief Constable of Kent Police A reprimand is being issued to Kent Police in respect of an incident in February 2021 when a Kent Police officer took a photograph…
- Chief Constable West Midlands Police A reprimand has been issued to West Midlands Police after the force repeatedly incorrectly linked and merged the records of two in…
- Chief Constable Devon and Cornwall Police Chief Constable Devon and Cornwall Police have continuously infringed Article 12(3) of the UK GDPR and Part 3, Chapter 3, Section …
- Chief Constable Dorset Police Chief Constable Dorset Police have continuously infringed Article 12(3) of the UK GDPR and Part 3, Chapter 3, Section 54 of the DP…
- Crown Prosecution Service An Enforcement Notice has been issued to the Crown Prosecution Service in relation to a contravention of the sixth data protection…
- Police Service of Northern Ireland (PSNI) PSNI failed to have appropriate measures in place to prevent unlawful sharing of personal data including criminal data with the Un…
- Chief Constable West Mercia Police and Chief Constable Warwickshire Police On 21 June 2021 West Mercia Police and Warwickshire Police erroneously decommissioned a server containing a Warwickshire Police ap…
- Ministry of Justice The Information Commissioner (the Commissioner) issues a reprimand to the Ministry of Justice (the MoJ) in accordance with Article…
- Nottinghamshire Police The breach in this case was an unauthorised disclosure of the personal data of witnesses via a police officer’s unredacted stateme…
- Thames Valley Police The Information Commissioner (the Commissioner) issues a reprimand to Thames Valey Police (TVP) in accordance with Schedule 13(2)(…
- Sussex Police In June 2020, the ICO became aware that staff members across both Sussex Police and Surrey Police had access to an app that record…
- Surrey Police In June 2020, the ICO became aware that staff members across both Sussex Police and Surrey Police had access to an app that record…
- Metropolitan Police Service MPS was unable to ensure that sensitive criminal records were not able to be uploaded correctly to the Police National Database (P…
- Chief Constable of Kent Police From October 2020 to February 2021, Kent Police received over 200 SARs, 60% were completed during the statutory deadline. However,…
- South Wales Police A reprimand has been issued after the disclosure of personal information by South Wales Police on two separate occasions, the firs…
- Chief Constable of North Yorkshire Police North Yorkshire Police has been issued with a reprimand in accordance with Schedule 13 (2) of the DPA 2018.