Authority
ICO
Country
United Kingdom
Date Issued
March 12, 2024
Industry
Government
Summary
MOPAC accidentally exposed two webforms on the London.gov.uk website to public access between November 2022 and February 2023 when staff intended to grant permission to only four MOPAC members but misconfigured the access controls. The incident resulted in unauthorized public access to sensitive information that should have been restricted, leading to a formal reprimand from the ICO.
Violation Types
Data Subject RightsSecurityTransparency
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert