Authority
ICO
Country
United Kingdom
Date Issued
May 8, 2024
Industry
Government
Summary
The Electoral Commission received a reprimand from the ICO for failing to implement appropriate technical and organizational security measures under UK GDPR Articles 5(1)(f) and 32(1)(b). A data breach affecting approximately 40 million individuals resulted from unpatched software vulnerabilities that allowed unauthorized access to personal data in the Electoral Register between August 2021 and October 2022.
Violation Types
SecurityData BreachRisk Assessment
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert