Data Protection incidents

You asked

I am writing under the Freedom of Information Act 2000 to request information about breaches of the Data Protection Act 1998 in your organisation, specifically I am requesting the following information:

1. Does your organisation pro-actively report breaches of Data Protection Act 1998 to the Information Commissioner’s Office?

   1a. If the answer is yes, please provide the number of breaches that have been reported.

2. Does your organisation have an internal procedure for responding to breaches of the Data Protection Act 1998?

   2a. If the answer is yes please provide the number of breaches that have occurred.

3. I further request that your responses to Questions 1 and 2 are broken down as follows:

   a. The number of employees that have been disciplined internally for breaches of the Data Protection Act 1998.

   b. The number of employees that have resigned during disciplinary procedures for breaches of the Data Protection Act 1998.

   c. The number of instances where a breach has not led to any disciplinary action.

   d. The number of employees that have had their employment terminated for breaches of the Data Protection Act 1998.

   e. The number of employees that have been convicted for breaches of Data Protection Act 1998.

In each case, I request that you provide a list of the offences committed by the individual(s) in question, for example "Accessed personal information for personal interest" or "Inappropriately shared information with a third party".

I request that the time period covered is 1st June 2011-1st June 2016.

We said

Thank you for your request. Please find the attached response.