Police Service of Northern Ireland: Insufficient technical and organisational measures to ensure information security

The ICO fined the Police Service of Northern Ireland £750,000 (EUR 904,000) after accidentally publishing personal data of 9,483 police officers and staff on the internet. The breach caused significant distress for PSNI officers and staff, as their personal information, including names, ranks, roles, and location of post, was exposed. Many feared for their safety, with concerns that dissident groups could use the data to intimidate or target them, creating fear and uncertainty.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 (1), (2) GDPR
Industry: Public Sector and Education