Enforcement Notice Issued

Published On:Monday, December 7, 2020


An Enforcement Notice has been issued to the Department of Health and Social Care (DHSC) due to a number of infringements of the data protection legislation. 

Over a period of time, there have been a number of infringements resulting in personal data breaches by the DHSC.  These have been caused by the use of email address autocomplete functionality and a lack of appropriate security measures which have led to personal data being provided to the wrong person.

The Enforcement Notice seeks to prevent future infringements and requires the DHSC, inter alia, to implement appropriate technical and organisational measures, including practical procedures, guidance and training for staff.

The DHSC has accepted the Enforcement Notice and is working towards compliance.

The Enforcement Notice can be found below and in the document library.