The potential damage and distress that could have been caused by this serious data breach is obvious.
Disclosing this information not only had the potential to put the prisoners at risk, but also risked the welfare of their families through the release of their home addresses.
– ICO Deputy Commissioner and director of data protection David Smith
Fortunately it appears that the fall-out from this breach was contained, but we cannot ignore the fact that this breach was caused by a clear lack of management oversight of a relatively new member of staff.
Furthermore the prison service failed to have procedures in place to spot the original mistakes.
It is only due to the honesty of a member of the public that the disclosures were uncovered as early as they were and that it was still possible to contain the breach.