- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Recruitment company reprimand – Reprimand (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A recruitment company was reprimanded for misconfiguring a storage container, making sensitive records publicly accessible. This situation highlights the importance of proper data management to protect workers' information.
What happened
The recruitment company left a storage container containing 12,000 records publicly accessible without authentication.
Who was affected
3,000 workers whose records were exposed were affected by this misconfiguration.
What the authority found
The Information Commissioner's Office found that the recruitment company violated data protection rules by failing to secure personal data appropriately.
Why this matters
This case underscores the need for all businesses, especially those handling personal data, to ensure their systems are properly configured to prevent unauthorized access.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Information Commissioner (the Commissioner) issues a reprimand to a recruitment company in respect of infringements of Article 5(1)(f) and 32(1)(b) of the UK GDPR. The organisation misconfigured a storage container, containing 12,000 records and relating to 3,000 workers, to be publicly accessible without any requirement to authenticate.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Recruitment company reprimand in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
9 August 2023
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Recruitment company reprimand - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: