A spreadsheet released by the Police Service of Northern Ireland (PSNI) in response to a freedom of information request inadvertently contained personal information about all 9,483 serving PSNI officers and staff. This data, which was included in a “hidden” tab in the spreadsheet, was subsequently published online.
The Information Commissioners Office (ICO) determined that PSNI’s internal procedures and sign-off protocols for securely disclosing information were inadequate.
The release of this information has had a significant impact on the lives of many affected individuals. Due to fears for their safety, some have had to relocate, distance themselves from family members, or completely change their daily routines. This has naturally caused anxiety and distress not only to those directly affected but also to their families and friends.
The ICO has provisionally fined the PSNI £750,000 for the breach. However, this amount was determined using a “public sector approach” to ensure that public funds are not diverted from essential services. Without this consideration, the ICO would have imposed a fine of £5.6 million.
Given the severe consequences, both for individuals and financially, this case underscores the importance of businesses having robust measures in place to protect personal information.
For more details, visit: [ICO News – PSNI Facing a £750k Fine Following Spreadsheet Error](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/05/psni-facing-a-750k-fine-following-spreadsheet-error-that-exposed-the-personal-information-of-its-entire-workforce/).