- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Post Office Limited – Reprimand (United Kingdom, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Post Office Limited was reprimanded for accidentally posting a document online that contained personal information about 502 claimants. This matters because it shows how important it is to protect personal data and avoid mistakes that can harm individuals' privacy.
What happened
Post Office Limited uploaded an unredacted legal document containing personal data to its website by mistake.
Who was affected
The 502 claimants whose personal data was exposed in the unredacted document.
What the authority found
The Information Commissioner's Office reprimanded Post Office Limited for failing to protect personal data as required by data protection rules.
Why this matters
This reprimand emphasizes the need for companies to handle sensitive information carefully. Businesses should implement strict data handling procedures to prevent similar incidents.
Source checks
Secondary-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 25 April 2024, Post Office Limited (POL) uploaded an unredacted copy of a legal Settlement Deed to its corporate website instead of the intended redacted version. The Settlement Deed contained the personal data of 502 claimants who were part of the 2017 group litigation brought against POL which exposed the Horizon IT Scandal.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Post Office Limited in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
2 December 2025
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Post Office Limited - United Kingdom (2025). Retrieved from cookiefines.eu
Last updated: