The DVLA data breach does not relate to one particular privacy violation but many. Indeed, the DVLA has reported almost 200 breach notifications to the UK’s data protection regulator – the Information Commissioner’s Office (ICO) – over the past year. That’s according to a recent Freedom of Information request. The request was made by Apricorn, a secure storage vendor in a bid to assess the effectiveness of data security measures in the public sector.
What information was breached?
According to the findings, the DVLA submitted 181 breach notifications to the ICO across 2019-20. It is likely that the introduction of the General Data Protection Regulation (GDPR), has resulted in an increase in breaches being reported to the ICO, as it is now mandatory to do so. However, this sheer amount of reports being made by the DVLA is cause for concern.
Commenting on this case our Head of Data Breach and expert data protection lawyer, Kingsley Hayes said:
“The public sector handles some of our most sensitive personal data, so a data breach could be disastrous. Nevertheless a reliance on unsecured legacy software and a lack of preparation for dealing with cyber-attacks has made the sector vulnerable. In particular, the findings by Apricorn highlight that the DVLA needs to do more to keep data safe and mitigate risk.
“Of course, there are also additional security concerns due to the ongoing pandemic. An increase reliance on homeworking, mobile devices, apps and other technology has the potential to make all organisations vulnerable. In addition, the public sector is especially lucrative to hackers, so more must be done to ensure robust data protection. As a priority that involves training staff and putting appropriate data management practices in place to ensure people across the country are not left paying the price”.
There may be some general issues that will be similar across these breaches, and if this is the case, those affected may be able to come together to pursue rectification and damages.
If you believe that your data has been compromised by the DVLA, and you would like to find out what you can do about it, contact Keller Lenkner UK to discuss a no win, no fee compensation claim.