ICO completes follow-up assessment of Dyfed Powys Police

The ICO has completed a follow-up assessment of Dyfed Powys Police who signed an undertaking last year to improve their data protection compliance. The undertaking meant that the police force had to engage in force-wide data protection training and refresher training, as well as ensuring that training and monitoring was properly recorded to address non-compliance and ensure that security measures are in place to properly protect data.

The involvement of the ICO (Information Commissioner’s Office) – the UK’s data watchdog – was to ensure that Dyfed Powys Police were upholding their data protection responsibilities after a number of incidents had previously occurred.

In the ICO’s follow-up report, they identified a number of positive changes that had been made, but they have also identified a number of areas that the police force needs to improve upon, which included a better focus on this month’s GDPR changes; ensuring outsourced third-parties are complying with data protection responsibilities; and ensuring staff are complying (and are up-to-date) with relevant data protection legislation.

Strong recommendations were also made with regards to compliance reviews being regularly undertaken, as well as ensuring that the management of information security is audited at relevant intervals.

Police data protection breach claims

I’m sure there are many out there who appreciate the hard work that the police do for us – putting themselves on the line to protect and serve. That being said, the police are not above the law, and they often need to know very personal and very sensitive data about people.

Police data breaches can be serious. We have seen a number of recent incidents, including the police force that lost key evidence in a sexual assault case, and Gwent Police fined for reportedly “hiding” a data breach as well.

It’s essential that any victim of a police data breach or data leak is entitled to seek the justice they deserve, and that’s why we’re here. A victim is entitled to claim data breach compensation from the police, so don’t assume that there is no avenue for justice because it’s the police you are going up against.

What can you do if you are a victim of a police data breach?

Police data breach claims must be assessed on a case-by-case basis, but if you’ve been the victim of a police data breach or data leak, you may be entitled to compensation.

The best thing to do is to contact our team in confidence for free, no obligation advice. If we think there is a claim to be made, we can offer No Win, No Fee representation.

Inogen Inc. medical data breach

Councils data breaches and GDPR