- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Mayor’s Office for Policing and Crime (MOPAC) – Reprimand (United Kingdom, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Mayor’s Office for Policing and Crime (MOPAC) was reprimanded after a webform on their site accidentally exposed personal data. This breach allowed the public to see sensitive information submitted by 394 individuals. It’s crucial for organizations to ensure that personal data is kept secure and private.
What happened
MOPAC accidentally made two webforms public, exposing personal data submitted by users.
Who was affected
394 individuals whose personal data was exposed through the public webforms on the London.gov.uk website.
What the authority found
The Information Commissioner's Office reprimanded MOPAC for failing to protect personal data, which was made publicly accessible due to a mistake.
Why this matters
This incident underscores the importance of data security and proper handling of personal information. Organizations must regularly review their data protection practices to prevent similar breaches.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Within the London.gov.uk website, there was a webform to contact the London Victims’ Commissioner as well as other webforms. Between 11-14 November 2022, a member of GLA intended to give four members of MOPAC permission to the webforms. However, instead of granting permission to the four members of MOPAC, they made two web forms public. On 23 February 2023 MOPAC were made aware by a member of the public that it was possible for users to click a button that would enable users to access information on every query that had been submitted via the form. 394 people were later notified of the breach due to the nature of the personal data that was made publicly accessible on the forms.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Mayor’s Office for Policing and Crime (MOPAC) in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
13 March 2024
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Mayor’s Office for Policing and Crime (MOPAC) - United Kingdom (2024). Retrieved from cookiefines.eu
Last updated: