United Kingdom

Police Service of Northern Ireland

904,000 €

GDPR enforcement action by Information Commissioner (ICO) on 2024-09-26.

Rank · Sector

of 357 in Public Sector and Education

Rank · United Kingdom

#15

of 28

Rank · All fines

#179

of 3,050

Case details

Authority: Information Commissioner (ICO)
Date: 2024-09-26
Controller / Processor: Police Service of Northern Ireland
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The ICO fined the Police Service of Northern Ireland £750,000 (EUR 904,000) after accidentally publishing personal data of 9,483 police officers and staff on the internet. The breach caused significant distress for PSNI officers and staff, as their personal information, including names, ranks, roles, and location of post, was exposed. Many feared for their safety, with concerns that dissident groups could use the data to intimidate or target them, creating fear and uncertainty.

Open original source Links to the regulator's original publication or another source.