Authority
ICO
Country
United Kingdom
Date Issued
March 1, 2023
Industry
Government
Summary
The Metropolitan Police Service failed to implement adequate controls to prevent unauthorized uploading, amendment, or deletion of sensitive criminal records in the Police National Database, a systemic issue that persisted undetected for an extended period. The organization had not developed automated verification systems despite the database being operational since 2011, creating significant risk of data integrity compromise.
Violation Types
Data Subject RightsSecurityData Retention
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert