Ministry of Defence: Data Protection
(asked on 27th October 2025) - View Source
Question to the Ministry of Defence:
To ask the Secretary of State for Defence, how many personal data breaches were reported by his Department to the Information Commissioner’s Office in each year since 2020; and how of those resulted in enforcement action.
22 personal data incidents have been reported by the Ministry of Defence to the Information Commissioner’s Office (ICO) since 2020.
Three of those resulted in enforcement action.
The personal data incidents reported to the ICO are listed in the Department’s Annual Report and Accounts:
Financial Year | Number of personal data incidents reported to the ICO | Incidents resulting in enforcement action |
2020-2021 | 7 | 0 |
2021-2022 | 12 | 3 |
2022-2023 | 2 | 0 |
2023-2024 | 1 | 0 |
The Annual Report and Accounts for 2024-2025 has not yet been published. This report will include an additional incident identified in 2023 which happened in February 2022 but was not reported previously due to an injunction being in place.