Data Security breaches – 2017 to date

How many companies in your local authority have been found guilty of being in breach of data security regulations each year, over the last five years? Please provide this data for the period between 1 January 2017 to 31 December 2021, broken down year by year.

Please provide a breakdown of these companies and identify:

the number of employees in each business
the turnover figures for each business, each year, over the last five years (1 January 2017 to 31 December 2021).

For the companies that were reprimanded for a data breach within this time period, please provide a breakdown of the ways in which they were reprimanded and the decisions made at their court case.

How many of these companies faced financial penalties? Please provide the financial breakdown of this.
How many of these companies were found not guilty once the case went to court? Please share a list of these companies.

Devon County Council is not responsible for enforcement of data protection legislation.  As such, we do not hold the information you are requesting.  In the interest of providing you with advice and assistance, we can confirm that responsibility for enforcement of data protection legislation rests with the Information Commissioner’s Office (ICO). Further details on the enforcement action taken by the ICO is published on their website at https://ico.org.uk/action-weve-taken/enforcement/