Sensitive care records found in disused West Sussex County Council offices
Published: 20/07/2026
| The Argus
West Sussex County Council has reported itself to the Information Commissioner's Office (ICO) following claims that unsecured documents containing care records were discovered inside a disused council building.
A 22-year-old urban explorer from Brighton, operating under the name Urban Xplores, claimed he gained entry to unlocked rooms at Durban House in Bognor Regis on 15 July. He reported finding hundreds of confidential records, including Blue Badges, application forms, court paperwork, names, addresses, and foster care files. Worryingly, he even discovered his own personal records from his time in care. Later, he visited and live-streamed from a second vacant council site, The Grange in Chichester, posting redacted photographs of the documents online.
While the council acknowledged the unauthorised entries, it refuted claims that the unoccupied buildings were abandoned, maintaining they were fully secured and regularly monitored. The council stated it is taking urgent action to relocate stored materials, review estate security, and investigate how access was gained. Sussex Police were notified, with the council warning it will consider legal action against those involved.
Separately, police arrested a 22-year-old man from Brighton on suspicion of using threatening words or behaviour near County Hall in Chichester later that evening. He has been released on conditional bail, while police confirmed the entry into the disused buildings remains a civil matter.
The ICO is currently assessing the information provided by the council.
Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.
Image credit Urban.xplores on Facebook
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 3,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.