Search

How can we help?

Icon

Failing to anonymise – the cost

A woman has received £75,000 in an out-of-court settlement after details of domestic abuse she had suffered were revealed by Greater Manchester Police (GMP) without her permission.

In 2014, the woman agreed with the GMP that it could use her experience in a training session for police officers and support agencies. She hoped this would help improve the support given to victims of domestic violence in the future but gave her consent on the understanding that the materials would be anonymised.

However, she later discovered that her identity and medical history had been disclosed in full and to a wider audience.  Also, those attending the session heard a recording of a 999 call she had made after she had been assaulted.

The woman alleged that she had suffered psychiatric harm and brought a claim for misuse of private information, breach of confidential information and non-compliance with the Data Protection Act 1998.

GMP admitted breaching her privacy but refused to admit that she was entitled to any damages (arguing that she had suffered no loss).  However, just days before the hearing, it settled out-of-court for £75,000.

GMP admitted breaching her privacy but refused to admit that she was entitled to any damages (arguing that she had suffered no loss).

This is believed to be one of the largest payments by a British force in a privacy case and serves as a reminder that employers should ensure that they have adequate training in place on data protection obligations .  Mistakes in this area can prove to be costly.  Earlier this year, Chelsea and Westminster Hospital NHS Foundation Trust was fined £180,000 after it revealed the email addresses of 781 users of an HIV service.

For useful data protection factsheets, checklists and templates, please visit employmentbuddy.com

For further advice on how to protect your business against data protection and privacy claims, please contact our employment lawyers on employment@clarkslegal.com

About this article

Disclaimer

This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

About this article

Read, listen and watch our latest insights

art
  • 02 July 2025
  • Employment

Day One Rights: What the New UK Employment Bill Means for You and Your Workplace

Let’s unpack what’s changing in the UK Employments Rights Bill, and why it matters, and what both employees and employers should expect.

art
  • 01 July 2025
  • Privacy and Data Protection

Data protection compliance: tricky issues for employers

This article highlights key issues organisations may face when processing personal data and stresses the importance of a proactive approach. It also outlines tailored training packages to support compliance and build internal expertise.

art
  • 26 June 2025
  • Employment

A shift in EHRC guidance on single sex spaces in the workplace

In a recent significant shift, the Equality and Human Rights Commission (“the EHRC”) has quietly amended its guidance on single sex spaces in the workplace.

art
  • 25 June 2025
  • Immigration

Immigration Changes in Statement HC 836 – what do they mean?

The UK government has released its latest Statement of Changes to the Immigration Rules (HC 836), with shocking implementation dates throughout July 2025.

art
  • 20 June 2025
  • Privacy and Data Protection

Data Protection reform receives Royal Assent: What is the Data (Use and Access) Act 2025 (DUAA) and what it means for your business

The UK’s data protection framework is about to undergo its most significant change since the UK GDPR came into force. After months of parliamentary debate, the Data (Use and Access) Act 2025 (‘DUAA’) has successfully received Royal Assent.

art
  • 18 June 2025
  • Employment

Pride Month: How Can You Celebrate as an Employer

The UK held its first Pride Parade in 1972, inspired by events held in major American cities following the Stonewall rebellion in New York in June 1969.