Outcomes - Selected Case Summaries
Categories
Government Department E-Services Website Breach
Informal Resolution | 25 March 2020
A government department notified us of a data breach involving an e-services website. A member of staff at a local law firm discovered that they were able to view the email addresses of other users of the site. There were 127 email addresses visible in total, although many of these were based on company roles. The law firm notified the department immediately and changes were made to the website so that future incidents of this nature are prevented.
After verifying the steps undertaken to prevent a repeat of this incident, there seemed to be no evidence of prejudice to the rights of the individuals involved and the case was closed without a formal enforcement notice.