ICO rebukes London borough over two-year exposure of 6,500 sets of personal info
ICO rebukes London borough over two-year exposure of 6,500 sets of personal info
A London borough council has been formally reprimanded by the UK’s data watchdog for exposing sensitive personal information of thousands of individuals, including unaccompanied asylum-seeking children, online for nearly two years. The breach occurred when hidden Excel workbooks containing this data were inadvertently published in response to a freedom of information request. The incident highlights the critical vulnerability inherent in standard data sharing formats, where sensitive details can remain concealed from general view yet remain easily accessible to those with basic technical knowledge. The investigation revealed that the data remained live until discovered by a charity-run transparency website, prompting immediate removal. Despite the severity of exposing classified information regarding vulnerable minors, the regulator opted for a reprimand rather than a fine, citing the age of the data and lack of evidence regarding malicious exploitation. This decision underscores a regulatory shift toward enforcing accountability through public censure and mandatory procedural improvements rather than financial penalties, aiming to drive systemic change in how public bodies handle disclosures. This case is highly relevant to the open data community as it illustrates the tension between transparency and privacy. It serves as a cautionary tale for organizations releasing public information, emphasizing that convenience in data formats like spreadsheets can lead to significant security oversights. The outcome reinforces the necessity for rigorous internal checks, staff training, and strict sign-off protocols before any data is made public, ensuring that openness does not come at the cost of individual privacy or safety.
Source: publictechnology.netPublished on 2025-05-29