Staffordshire Police Reprimanded for Data Breach of Domestic Abuse Victim's Address

• •Staffordshire Police unlawfully disclosed a domestic abuse victim's address to the alleged abuser.
• •The ICO found serious deficiencies in the police's data protection measures and training.
• •Staffordshire Police has since made improvements to prevent future breaches.

The Information Commissioner's Office (ICO) reprimanded Staffordshire Police for unlawfully disclosing a domestic abuse victim's address to their alleged abuser in March 2024. The breach occurred when a Domestic Violence Protection Notice (DVPN) was issued, which included the victim's address that was not previously known to the abuser. This disclosure caused serious distress to the victim, who had relocated multiple times to escape the alleged abuse. The ICO found that the police force lacked appropriate measures to prevent such unauthorized disclosures, including inadequate training completion rates in data protection. Following the incident, Staffordshire Police has implemented improvements, such as enhanced training and updated internal procedures to safeguard sensitive information. The ICO emphasized the importance of protecting personal information, especially in cases involving domestic abuse. Despite the severity of the breach, no fines were imposed on the police force.