Authority
ICO
Country
United Kingdom
Date Issued
November 1, 2022
Industry
Government
Summary
The Department for Education permitted third-party access to the Learning Records Service database for age verification processing without appropriate control, oversight, or transparency, resulting in insecure processing of personal data including children's information for purposes beyond the original intent.
Violation Types
Children's DataData ProcessingTransparencySecurity
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert