ICO, MoD tensions revealed over 2022 data breach 'break glass' moment

A response to a Freedom of Information request submitted by Tom Webb, Senior Editor at Lexology Pro, has revealed communication difficulties between the Information Commissioner's Office (ICO) and the Ministry of Defence (MoD) concerning the 2022 personal data breach that exposed the identities of thousands of Afghan relocation applicants.

The post suggests that the MoD delayed providing updates to the ICO ahead of a scheduled public disclosure, or "break glass" moment, regarding the incident. In June and July, members of the ICO's public relations and enforcement teams reported being stonewalled despite repeated attempts to make contact. Investigators warned that the lack of information left them with a limited understanding of the situation.

Although the MoD later apologised for the short notice and adjusted the disclosure date, the correspondence highlights the level of tension. 

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.