Figures from the Information Commissioner’s Office show that nearly 30 million people in the UK have experienced a data breach. In total, 55% of UK adults reported having had their data lost or stolen, with 30% of them experiencing emotional distress as a result, yet a quarter said they received no support from the organisations responsible, and 32% found out through the media rather than from the organisation itself.
Qualitative research conducted by the ICO also revealed experiences of people having to move homes, feeling forced out of their jobs, and facing discrimination as a result of data breaches they had experienced. People told the ICO they felt the real impact on their life was insufficiently recognised by the organisation responsible.
In an article published alongside the figures, John Edwards said people in vulnerable situations – such as survivors of domestic abuse and those living with long-term health conditions – are often disproportionately affected by such breaches. These people may already be in precarious situations, and the unauthorised disclosure of their personal data can heighten the risks they face.
John Edwards said: “There are two important things I need organisations to understand: empathy and action. You have a role to stop the negative ripple effect in someone’s life from spreading further. It is vitally important to acknowledge what has happened, be human in your response, and commit to making sure it doesn’t happen again. We trust organisations with some of the most sensitive personal information imaginable, yet these data breaches continue to happen. This is not just an admin error – it is about people. When data is mishandled, it can have serious and long-lasting consequences, particularly for people in vulnerable situations. We need organisations across the country to do better.”
Research was conducted by Savanta on behalf of the ICO. Savanta conducted the survey among 5,533 members of the UK public.