Action we've taken Enforcement action 14 in total Her Majesty's Revenue and Customs 10 May 2019, Enforcement notices, Central government HMRC issued with an enforcement notice for failing to get adequate consent to collect callers' personal data. Shamim Sadiq 05 April 2019, Prosecutions, Health A former GP practice manager has been fined for sending personal data to her own email account without authorisation, following an investigation by the Information Commissioner’s Office (ICO). Faye Caughey 15 March 2019, Prosecutions, Health A former administrator at Heart of England NHS Foundation Trust (HEFT) has been prosecuted for accessing medical records without authorisation. Kevin Bunsell 26 February 2019, Prosecutions, Local government A former senior local government officer has been prosecuted for passing the personal information of rival job applicants to his partner who had applied for a job at the Council. Hannah Pepper 28 November 2018, Prosecutions, Health A former doctor’s surgery employee who inappropriately accessed the records of patients and staff members has been prosecuted. Bupa Insurance Services Ltd 28 September 2018, Monetary penalties, Health Bupa Insurance Services Limited (Bupa) has been fined £175,000 by the Information Commissioner’s Office (ICO) for failing to have effective security measures in place to protect customers’ personal information. Clare Lawson 24 September 2018, Prosecutions, Health A former nurse at Southport and Ormskirk Hospital NHS Trust has been prosecuted for accessing patients’ medical records without authorisation. London Borough of Lewisham 06 September 2018, Enforcement notices, Local government Enforcement notice for London Borough of Lewisham. Independent Inquiry into Child Sexual Abuse 18 July 2018, Monetary penalties, Central government Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing identities of abuse victims in mass email. Bayswater Medical Centre 23 May 2018, Monetary penalties, Health Bayswater Medical Centre in London has been fined £35,000 by the ICO after it left highly sensitive medical information in an empty building. The Royal Borough of Kensington and Chelsea 16 April 2018, Monetary penalties, Local government The Royal Borough of Kensington and Chelsea has been fined £120,000 by the Information Commissioner’s Office (ICO) after it unlawfully identified 943 people who owned vacant properties in the… Pennine Care NHS Foundation Trust 02 February 2018, Undertakings, Health A follow up has been completed to provide an assurance that Pennine Care NHS Foundation Trust has appropriately addressed the actions agreed in its undertaking signed 1 February 2017. Secretary of State for Justice 21 December 2017, Enforcement notices, Central government Secretary of State for Justice enforcement notice. Nottinghamshire County Council 31 August 2017, Monetary penalties, Local government A council has been fined £70,000 by the Information Commissioner’s Office for leaving vulnerable people’s personal information exposed online for five years. Loading results