Latest Public Sector News

07.06.17

Council fined £150,000 after family’s sensitive data published online for six weeks

A council in Essex has been fined £150,000 by the Information Commissioner’s Office (ICO) after it published sensitive information about a family.

Basildon Borough Council was found guilty of breaching the Data Protection Act when it published personal information about a family in planning documents which were visible on the authority’s site.

Investigators discovered that on 16 July 2015, council staff received a written statement in support of a householder’s planning application for works in a green belt.

However, the statement contained sensitive personal data relating to a traveller family who had been living on the site for many years.

More shockingly, the document revealed information about the family’s disability requirements, their mental health issues as well as their names, ages and the location of their home.

The statement, including all the sensitive data, was published on Basildon’s planning portal, and the ICO workers also found that this was due to failings in data protection, procedures and training. And it was also found that the council did not take the information down until the 4 September 2015, meaning it was live on the Basildon site for over six weeks before being removed.

“This was a serious incident in which highly sensitive personal data, including medical information, was made publicly available,” said ICO enforcement manager Sally Anne Poole. “Planning applications in themselves can be controversial and emotive, so to include such sensitive information and leave it out there for all to see for several weeks is simply unacceptable.”

Poole stated that the law around data protection was clear, adding that planning regulations don’t remove an individual’s rights.

“Local authorities and, indeed, all organisations must be certain that their internal processes and procedures are robust and secure enough to ensure that people’s sensitive personal information is protected,” she concluded.

A Basildon Council spokesman said: "The authority has been given 28 days in which to lodge an appeal against this decision. “We are taking advice and considering our position." 

Have you got a story to tell? Would you like to become a PSE columnist? If so, click here.

Comments

Steve Parish   13/06/2017 at 16:53

Is this material that the applicants had themselves put forward to justify development in the green belt? If so I'm not sure how you'd balance data protection with ano open process of determining exceptional circumstances. I'm amazed at plans committee how free people can be in a public meeting about their medical needs.

Add your comment

public sector executive tv

more videos >

last word

Prevention: Investing for the future

Prevention: Investing for the future

Rob Whiteman, CEO at the Chartered Institute of Public Finance (CIPFA), discusses the benefits of long-term preventative investment. Rising demand, reducing resource – this has been the r more > more last word articles >

public sector focus

View all News

comment

Peter Kyle MP: It’s time to say thank you this Public Service Day

21/06/2019Peter Kyle MP: It’s time to say thank you this Public Service Day

Taking time to say thank you is one of the hidden pillars of a society. Bei... more >
How community-led initiatives can help save the housing shortage

19/06/2019How community-led initiatives can help save the housing shortage

Tom Chance, director at the National Community Land Trust Network, argues t... more >

interviews

Artificial intelligence: the devil is in the data

17/12/2018Artificial intelligence: the devil is in the data

It’s no secret that the public sector and its service providers need ... more >