Action we've taken Enforcement action 20 in total Shamim Sadiq 05 April 2019, Prosecutions, Health A former GP practice manager has been fined for sending personal data to her own email account without authorisation, following an investigation by the Information Commissioner’s Office (ICO). Faye Caughey 15 March 2019, Prosecutions, Health A former administrator at Heart of England NHS Foundation Trust (HEFT) has been prosecuted for accessing medical records without authorisation. Kevin Bunsell 26 February 2019, Prosecutions, Local government A former senior local government officer has been prosecuted for passing the personal information of rival job applicants to his partner who had applied for a job at the Council. Hannah Pepper 28 November 2018, Prosecutions, Health A former doctor’s surgery employee who inappropriately accessed the records of patients and staff members has been prosecuted. Bupa Insurance Services Ltd 28 September 2018, Monetary penalties, Health Bupa Insurance Services Limited (Bupa) has been fined £175,000 by the Information Commissioner’s Office (ICO) for failing to have effective security measures in place to protect customers’ personal information. Clare Lawson 24 September 2018, Prosecutions, Health A former nurse at Southport and Ormskirk Hospital NHS Trust has been prosecuted for accessing patients’ medical records without authorisation. London Borough of Lewisham 06 September 2018, Enforcement notices, Local government Enforcement notice for London Borough of Lewisham. Independent Inquiry into Child Sexual Abuse 18 July 2018, Monetary penalties, Central government Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing identities of abuse victims in mass email. Bayswater Medical Centre 23 May 2018, Monetary penalties, Health Bayswater Medical Centre in London has been fined £35,000 by the ICO after it left highly sensitive medical information in an empty building. The Royal Borough of Kensington and Chelsea 16 April 2018, Monetary penalties, Local government The Royal Borough of Kensington and Chelsea has been fined £120,000 by the Information Commissioner’s Office (ICO) after it unlawfully identified 943 people who owned vacant properties in the… Pennine Care NHS Foundation Trust 02 February 2018, Undertakings, Health A follow up has been completed to provide an assurance that Pennine Care NHS Foundation Trust has appropriately addressed the actions agreed in its undertaking signed 1 February 2017. Secretary of State for Justice 21 December 2017, Enforcement notices, Central government Secretary of State for Justice enforcement notice. Nottinghamshire County Council 31 August 2017, Monetary penalties, Local government A council has been fined £70,000 by the Information Commissioner’s Office for leaving vulnerable people’s personal information exposed online for five years. London Borough of Islington 17 August 2017, Monetary penalties, Local government Islington Council failed to keep up to 89,000 people’s information secure on its parking ticket system website. That was the conclusion of an Information Commissioner’s Office investigation which has resulted in a £70,000 fine for the London borough. Cheshire West and Chester Council 10 August 2017, Undertakings, Local government An Undertaking to comply with the seventh data protection principle has been signed by Cheshire West and Chester Council. Royal Free London NHS Foundation Trust 03 July 2017, Undertakings, Health The ICO has ruled the Royal Free London NHS Foundation Trust failed to comply with the Data Protection Act when it provided patient details to Google DeepMind. Medway Council 13 June 2017, Enforcement notices, Local government Medway Council has been issued with an enforcement notice by the Information Commissioner's Office. Gloucester City Council 12 June 2017, Monetary penalties, Local government The Information Commissioner’s Office has fined Gloucester City Council £100,000 after a cyber attacker accessed council employees’ sensitive personal information. Basildon Borough Council 31 May 2017, Monetary penalties, Local government A council has been fined £150,000 by the Information Commissioner’s Office for publishing sensitive personal information about a family. London Borough of Ealing 03 May 2017, Undertakings, Local government A follow up has been completed to provide an assurance that the London Borough of Ealing has appropriately addressed the actions agreed in its undertaking signed October 2016. Loading results