- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Thames Valley Police – Violation Found (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Thames Valley Police faced scrutiny for disclosing information that put a witness's safety at risk. This incident underscores the need for proper training and procedures in handling sensitive data.
What happened
Thames Valley Police disclosed information that revealed a witness's address, endangering their safety.
Who was affected
The witness whose address was disclosed is the person affected by this breach.
What the authority found
The authority reprimanded Thames Valley Police for lacking adequate training and oversight in their data handling processes.
Why this matters
This incident illustrates the critical need for organizations to implement strong data protection training and policies to safeguard sensitive information.
Source checks
Linked-source text retrieved.
Automated check recorded — 20 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
TVP have inappropriately disclosed contextual information that led to suspected criminals learning the address of a witness (the data subject). As a result of this incident, the data subject has moved address and the impact and risk to the data subject remains high. This incident occurred because TVP did not have the appropriate organisational measures in place to ensure that their officers were aware of existing guidance around disclosure and redactions. TVP have been unable to evidence that the officer who responded to the information request from the housing authority had received redaction training or was aware of existing policies around sharing information. Further to this, there was no oversight of the redaction process as TVP thought that the officer in question had sufficient experience to complete the redactions. The Commissioner has decided to issue a reprimand to TVP and further action is recommended to ensure compliance with the DPA2018.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Thames Valley Police in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Thames Valley Police - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: