The Information Commissioner’s Office (ICO) has said the Department for Education (DfE) violated the Data Protection Act, but because the compromised information was not sensitive, it will not take action against the organisation, Out-Law.com reports. Due to a “temporary security flaw,” e-mail addresses, unencrypted passwords and individuals’ answers to consultation questions were accessible online. The ICO said, “as the personal information compromised was not sensitive, and any distress caused is likely to have been minimal, we have decided that no further enforcement action is required at this time.”
Full Story