- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
UK Ministry of Defense – €400,000 Fine (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The UK Ministry of Defense was fined EUR 400,000 for accidentally disclosing personal email addresses of Afghan nationals eligible for evacuation. This is significant because it underscores the need for careful handling of sensitive information, especially in crisis situations.
What happened
The UK DPA fined the Ministry of Defense EUR 400,000 for revealing personal data in an email to Afghan nationals.
Who was affected
Afghan nationals who were eligible for evacuation to the UK after the Taliban takeover were affected.
What the authority found
The authority ruled that the Ministry of Defense failed to protect personal data, which could have endangered lives if it fell into the wrong hands.
Why this matters
This ruling emphasizes the critical importance of data security, particularly for government agencies handling sensitive information. Organizations must implement strict protocols to protect personal data from accidental disclosure.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The UK DPA has fined the Ministry of Defense EUR 400,000 for disclosing personal data of individuals who were to be relocated to the UK after the Taliban took control of Afghanistan in 2021. The Ministry of Defense had sent an email to a distribution list of Afghan nationals who were eligible for evacuation without hiding the e-mail adresses and thus revealing the personal e-mail addresses and personal data of the recipients to the other e-mail recipients. The ICO stated that if the data had fallen into the hands of the Taliban, it could have led to a threat to lives.
Related Enforcement Actions (0)
No other enforcement actions found for UK Ministry of Defense in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 December 2023
Authority
Information Commissioner's Office
Fine Amount
€400,000
Enforcement Tracker ID
ETid-2170
About this data
Cite as: Cookie Fines. UK Ministry of Defense - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: