Video: How does data blunder affect battle against Covid-19? (PA Media)
The Department for Education broke the law in its mishandling of the national database containing details of every school pupil in England, the Information Commissioner’s Office has concluded in a highly critical report.
The report marks the second time in less than a year that the DfE has been publicly rebuked by the privacy watchdog for failing to adhere to data protection laws.
After an investigation triggered by complaints from groups including Liberty, the ICO found that the DfE had failed to comply with sections of the general data protection regulation (GDPR). It said there was “no clear picture of what data is held by the DfE” and that its handling of millions of pupil records “could result in multiple data breaches”.
Related: Department of Education