Back to Explorer
UK GDPRGovernment

Department for Work and Pensions

Data Breach

Authority

ICO

Country

United Kingdom

Date Issued

October 30, 2022

Industry

Government

Summary

The Department for Work and Pensions inappropriately disclosed personal data of individuals through the Child Maintenance Appeals service after implementing a Xerox Reprographics application without conducting required testing or data protection impact assessment. The failure to perform a DPIA before deployment resulted in inadequate safeguards for sensitive personal information.

Violation Types

Data BreachDPIAChildren's Data

Articles Violated

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.

Talk to an Expert