Action we've taken Enforcement action 22 in total Hannah Pepper 28 November 2018, Prosecutions, Health A former doctor’s surgery employee who inappropriately accessed the records of patients and staff members has been prosecuted. Bupa Insurance Services Ltd 28 September 2018, Monetary penalties, Health Bupa Insurance Services Limited (Bupa) has been fined £175,000 by the Information Commissioner’s Office (ICO) for failing to have effective security measures in place to protect customers’ personal information. Clare Lawson 24 September 2018, Prosecutions, Health A former nurse at Southport and Ormskirk Hospital NHS Trust has been prosecuted for accessing patients’ medical records without authorisation. London Borough of Lewisham 06 September 2018, Enforcement notices, Local government Enforcement notice for London Borough of Lewisham. Independent Inquiry into Child Sexual Abuse 18 July 2018, Monetary penalties, Central government Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing identities of abuse victims in mass email. Bayswater Medical Centre 23 May 2018, Monetary penalties, Health Bayswater Medical Centre in London has been fined £35,000 by the ICO after it left highly sensitive medical information in an empty building. Michelle Harrison 23 April 2018, Prosecutions, Health Michelle Harrison of Milton Keynes, inappropriately accessed the records of 12 patients outside of her role as receptionist/general assistant in the Orthotics Department at Milton Keynes University Hospital NHS Foundation Trust between March 2016 and January 2017. The Royal Borough of Kensington and Chelsea 16 April 2018, Monetary penalties, Local government The Royal Borough of Kensington and Chelsea has been fined £120,000 by the Information Commissioner’s Office (ICO) after it unlawfully identified 943 people who owned vacant properties in the… Pennine Care NHS Foundation Trust 02 February 2018, Undertakings, Health A follow up has been completed to provide an assurance that Pennine Care NHS Foundation Trust has appropriately addressed the actions agreed in its undertaking signed 1 February 2017. Secretary of State for Justice 21 December 2017, Enforcement notices, Central government Secretary of State for Justice enforcement notice. Nottinghamshire County Council 31 August 2017, Monetary penalties, Local government A council has been fined £70,000 by the Information Commissioner’s Office for leaving vulnerable people’s personal information exposed online for five years. London Borough of Islington 17 August 2017, Monetary penalties, Local government Islington Council failed to keep up to 89,000 people’s information secure on its parking ticket system website. That was the conclusion of an Information Commissioner’s Office investigation which has resulted in a £70,000 fine for the London borough. Cheshire West and Chester Council 10 August 2017, Undertakings, Local government An Undertaking to comply with the seventh data protection principle has been signed by Cheshire West and Chester Council. Royal Free London NHS Foundation Trust 03 July 2017, Undertakings, Health The ICO has ruled the Royal Free London NHS Foundation Trust failed to comply with the Data Protection Act when it provided patient details to Google DeepMind. Medway Council 13 June 2017, Enforcement notices, Local government Medway Council has been issued with an enforcement notice by the Information Commissioner's Office. Gloucester City Council 12 June 2017, Monetary penalties, Local government The Information Commissioner’s Office has fined Gloucester City Council £100,000 after a cyber attacker accessed council employees’ sensitive personal information. Basildon Borough Council 31 May 2017, Monetary penalties, Local government A council has been fined £150,000 by the Information Commissioner’s Office for publishing sensitive personal information about a family. London Borough of Ealing 03 May 2017, Undertakings, Local government A follow up has been completed to provide an assurance that the London Borough of Ealing has appropriately addressed the actions agreed in its undertaking signed October 2016. Northern HSC Trust 11 April 2017, Undertakings, Health A follow up has been completed to provide an assurance that Northern HSC Trust has or is taking action to meet the requirements of the undertaking signed July 2016 . Wolverhampton City Council 29 March 2017, Undertakings, Local government A follow up has been completed to provide an assurance that Wolverhampton City Council has appropriately addressed the actions agreed in its undertaking signed June 2016. Norfolk County Council 20 March 2017, Monetary penalties, Local government A county council which left files that included sensitive information about children in a cabinet sent to a second hand shop has been fined £60,000 by the Information Commissioner’s Office. HCA International Ltd 28 February 2017, Monetary penalties, Health The Information Commissioner’s Office has fined a private health company, HCA International Ltd, for failing to keep fertility patients’ personal information secure. Loading results