Recorded Personal Data Breaches and Causes

Please provide the following information for your organisation for each calendar month from 1 March 2024 to August 10th 2025  (or the most recent date available):



1. Recorded Personal Data Breaches



2. Broad Cause Categories



3. Individuals Affected (if recorded)

1. Total: 413 incidents

2.  Human Error / Misdirected Data

This includes incidents such as emails sent to incorrect recipients, documents shared with unintended parties, and other forms of accidental disclosure.

3.Determining this figure would require manual review of each incident, which is not feasible within reasonable time constraints (estimated 20-34 hours of manual effort - 3-5 minutes per incident).

As such we are claiming the exemption set out at Section 12 of the Freedom of Information Act 2000, which states that a public authority is not obliged to respond to a request where the cost of doing so would exceed the appropriate limit.

For local authorities the appropriate limit is set at £450, which equate to 18 hours of officer time charged at £25 per hour.