PSNI faces £750,000 fine for data breach impacting entire workforce

The Police Service of Northern Ireland (PSNI) is confronting a significant £750,000 fine from the UK’s Information Commissioner’s Office (ICO) due to its failure to safeguard the personal information of its entire workforce, stemming from a massive data breach last August. The ICO highlighted that the penalty could have soared to £5.6 million if a private sector entity had been involved.

The breach resulted in dissident republicans obtaining access to crucial details, including the surnames, initials, ranks, and roles of all 9,483 serving PSNI officers and civilian staff. This mishap occurred following an erroneous release of information in response to a Freedom of Information request.

According to the ICO, the breach instilled a tangible fear of threat to life, emphasizing the inadequacy of the PSNI’s internal procedures and sign-off protocols for safe information disclosure. UK Information Commissioner John Edwards stressed the severity of the incident, noting its unprecedented nature and the heightened sensitivities in Northern Ireland.

PSNI Deputy Chief Constable Chris Todd regretted the ICO’s decision, citing the organization’s financial constraints and challenges in implementing necessary changes. He affirmed the PSNI’s intention to make representations regarding the fine amount before making a final decision.

Chair of the Police Federation for Northern Ireland, Liam Kelly, underscored the breach’s impact on officers and staff, particularly during a heightened threat level. Kelly welcomed the reduced fine but emphasized the need for the PSNI to utilize the funds effectively, suggesting support for colleagues and community initiatives.