Question to the Cabinet Office:
To ask the Minister for the Cabinet Office, how many data breaches his Department has reported to the Information Commissioner's Office under the UK GDPR since 4 July 2024; and what type of information did these breaches relate to.
The Cabinet Office has reported eight data breaches to the Information Commissioner since 4 July 2024. The breaches and the data they related to is set out as follows:
Date of breach | Type of information released |
12 July 2024 | Data relating to the Equality Hub copied to a private email account |
26 July 2024 | Data errors led to a civil service pension being paid to the wrong individual |
20 July 2024 | Data errors led to a civil service pension being paid to the wrong individual |
10 September 2024 | Employee email shared with incorrect recipients |
10 March 2025 | Vetting data was shared with the incorrect recipient |
19 March 2025 | An attachment of earnings order was sent to an incorrect recipient |
17 April 2025 | Ex-staff member retained departmental data on personal email account |
19 May 2025 | Data published in error as part of Cabinet Office transparency report |