- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Nottinghamshire County Council – Reprimand (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Nottinghamshire County Council faced a reprimand after a social worker sent sensitive information to the wrong people. This is significant because it shows how important it is to protect personal data, especially when it involves vulnerable individuals. The council was warned to improve their data handling practices.
What happened
Nottinghamshire County Council improperly sent sensitive personal data to individuals who should not have received it.
Who was affected
The mother and her two children, whose sensitive information was disclosed, were affected.
What the authority found
The Information Commissioner's Office reprimanded the council for failing to protect sensitive personal data under UK GDPR.
Why this matters
This case underscores the critical need for organizations to handle sensitive information carefully. It serves as a reminder that mishandling data can put individuals at risk.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A social worker sent copies of a Child and Family Assessment report to the mother and her two ex-partners: each the father of one of her two children. The report contained sensitive personal data which should have been redacted from the copies sent to the partners. The material disclosed related to previous domestic violence enacted on the mother and the two children. This disclosure put the mother and the two children at risk of actual physical harm and created a volatile and dangerous situation between the parties. A reprimand has therefore been issued to Nottinghamshire County Council in relation to an infringement of Article 32(1) of the UK General Data Protection Regulation (UK GDPR).
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Nottinghamshire County Council in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
27 September 2023
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Nottinghamshire County Council - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: