Data Protection

Council fined £250,000 for data protection breach

A council has been fined £250,000 following the dumping of former employees' pension records in an over-filled paper recycling bin in a public car park. The council had outsourced the digitisation of the records to a third-party processor without agreeing a contract, obtaining guarantees on how the personal data would be kept secure or properly monitoring how the data was being handled.

The Information Commissioner imposed the £250,000 civil monetary penalty notice (MPN) using his powers under the Data Protection Act 1998. This checklist explains what an MPN is and sets out when the Commissioner can issue an MPN against a business.

For further inormation, please contact our Dispute Resolution Team.


Contact us

O'Neill Patient Solicitors LLP
Chester House, 2 Chester Road, Hazel Grove,  Stockport, Cheshire, SK7 5NT


0161 694 3000 / 0161 483 8555



0844 576 2140 (we do not accept service by fax or email)