Enforcement · Information Commissioner (ICO) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Tuckers Solicitors LLP: Non-compliance with general data processing principles

€115,000 Fine
Tuckers Solicitors LLP
UNITED KINGDOM
Art. 5 GDPR
Encryption Data Breaches Notification Obligation Security Health Data Healthcare Privacy by Design & Default IP Address
Mar 10, 2022 Source

How it connects

Related across sources

Guidance EDPB Annual Report 2021 EDPB Case Law SG Nürnberg - S 5 SF 65/24 DS Social Court Nuremberg Guidance Guidelines 9/2022 on personal data breach notification under GDPR EDPB News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Journal of Data Protection Privacy Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB

Full text

The UK DPA (ICO) has fined law firm Tuckers Solicitors LLP EUR 115,000. Tuckers suffered a ransomware attack on its systems, which resulted in a personal data breach. As part of its investigation, the DPA determined that Tuckers had failed to take appropriate technical and organizational measures to protect personal data. This failure left its systems vulnerable to malicious attacks. The attackers managed to encrypt 972,191 individual files of which 24,712 were related to court proceedings and to siphon off 60 files and publish them in underground data marketplaces. The files contained both personal and special category data, such as medical records, witness statements, names and addresses of witnesses and victims, and the alleged crimes of data subjects.

Industry: Finance, Insurance and Consulting

Original document at the source ico.org.uk

Similar Content