Wiltshire Council refers recycling centre data breach to ICO

A potential data breach at a Wiltshire recycling centre has been reported to the Information Commissioner’s Office after a worker was accused of using a woman’s details to find her on social media.

Wiltshire Council has referred the case to the Information Commissioner’s Office (ICO) because it considered the step appropriate under its GDPR obligations.

The development follows allegations first reported by the Local Democracy Reporting Service that a woman was left “frightened” after visiting Stanton St Quintin Household Recycling Centre, near Chippenham.

Her father claimed a worker at the site subsequently attempted to add her on Snapchat, and Instagram, with requests continuing over nine days.

Council and police trying to resolve loose horses causing traffic hazard Council leader complaint ruled as no breach Waste collection vehicles tyres let down and fence damaged overnight Warning as important changes introduced at local recycling centres From Parliament to parishes – frustration grows over recycling centre decision

He alleged the worker had identified his daughter using information available through the recycling centre’s system and raised concerns how residents’ personal details were being protected.

The woman has not been named.

Following further questions from the LDRS, Wiltshire Council has confirmed the case has been referred to the ICO.

A council spokesperson said: “Wiltshire Council reported the matter to the Information Commission’s Office because it identified a potential personal data breach and considered it appropriate to do so under its UK GDPR obligations.

“As the matter concerns identifiable individuals and is subject to regulatory consideration, it would not be appropriate to further.”

The council would not say whether its investigation had established if the worker accessed or used information held on council or contractor systems to identify or the woman.

The authority previously said staff at recycling centres have access to a limited amount of information needed to check whether residents are eligible to use the service, comprising their vehicle registration, first name, surname and address.

The sites are operated by FCC Environment on behalf of the council.

Asked what action had now been taken, the council said: “FCC Environment have thoroughly investigated the matter and have advised that appropriate action had been taken.

“All staff have been reminded of their responsibilities when viewing personal information.”

However, the authority said it could not provide further details any action involving the individual concerned.

When the allegations initially emerged, the council said it had received no complaints recycling centre workers inappropriately accessing residents’ information or contacting them privately after a visit.

At the time, Cllr Paul Sample, cabinet member for waste, said residents should be able to use council services “with confidence” and that concerns were taken seriously.