Data breach compo
Asturias Es Mi… 09 Aug 23 09:24
Reply |

Now THAT is going to lead to an eye watering bill

PSNI data breach: Officers and staff 'frightened' after details leaked

https://www.bbc.co.uk/news/uk-northern-ireland-66447388

 

it's actually really hard to convert a breach into compo imo so far

although tbf I can't say "someone might shoot me in the back of the head u divs" as my loss

I think the case law shows that the data breach has to be of sensitive personal data for damages to be awarded, and there has to be distress (which I think would be easy to prove in these cases).  From what I understand the data leaked wasn't sensitive personal data, so unless the Courts change the position there would be no compo.

“You with the face”: heh, unless the UKGov drastically changes its position on maintaining a functioning security apparatus in NI it will foot the extremely large bill to mitigate the risk here and pronto

As other have said this kind of shizzle has happened before and the spend was impressive. It will be again

call it compo , call it mitigation, call it whatever,  they will pay to “fix” this

surely your very identity is sensitive?

Special category data is defined in the GDPR and DPA.  The information leaked (Surname, initial, work office as I understand it, doesn't fall into that category).

call it compo , call it mitigation, call it whatever,  they will pay to “fix” this

I have no doubt at all that this will be the case, but the discussion on this thread had moved to compensation payable under the law in legal proceedings, or I had understood it.  Having brought such proceedings in the past and knowing the statute and case law a little, I was just sharing the legal position, rather than the likely practical outcome.