30

BBC reports 27 data breaches since April 2020 with no ICO enforcement action.

Conclusion
The BBC told us it has had no data breaches that it has had to report to the Information Commissioner’s Office (ICO) this financial year. It has reported 27 data breaches since April 2020 and told us that the ICO had not taken any enforcement action against the BBC in relation to any of those cases. The BBC assured us that it monitors and manages all data incidents very carefully and that it raises incidents when it needs to.55 49 C&AG’s Report, para 17 50 Qq 72, 74 51 Q 91 52 Q 91 53 Q 92 54 C&AG’s Report, para 17 55 Qq 93–95; Letter dated 13 January from Leigh Tavaziva, BBC Group Chief Operating Officer, to PAC Chair BBC Digital 15
Government Response

A response document is linked to this report, dated 27 June 2023. Response attribution to this conclusion has not been verified. Read the response document.

Addressee Bodies
HM Treasury
Timeline
Recommendation age 3.4 yrs
Report published 28 Apr 2023