GLOUCESTERSHIRE Constabulary paid out £15,000 in compensation to data breach claims since 2022, according to new data.

Figures obtained by Data Breach Claims UK found that Gloucestershire Police had a number of claims regarding data breaches since 2022.

In that year, one claim regarding a data breach was made against the service, with the number of claims rising to five, a year later. Over the past year, the force has seen an increase in these claims, with the total standing at nine. The claims led to a total of £15,000 being paid out to successful claimants, with the highest amount being paid in 2024/25 at £11,000.

Bethan Simons, Solicitor at JF Law, said: “Breaches don’t always have to be complex cyberattacks, as breaches can often occur from human error. This can include misdirected emails, documents sent to the wrong address, the loss or theft of devices such as laptops or USB sticks containing sensitive information, or even the accidental publication of data, as seen with several UK forces.

“Internal mishandling is another cause of data breaches, such as officers accessing data without authorisation or failing to redact certain sensitive details.

“To prevent these breaches, forces must prioritise data protection measures involving comprehensive training for staff on data handling protocols, encryption of devices, and strict policies regarding the sharing and retention of data.”

Due to the sensitive nature of the information held, police forces try to ensure that data is handled with the utmost respect to maintain the public’s trust and confidence.

Police officers and staff have access to vast amounts of personal data, which can include information such as a person’s name, phone number, email or address.

As police forces have to keep extensive records for investigations, they are seen as data controllers under the Data Protection Act 2018.

As a result, data breach incidents can occur where this personal data is destroyed, altered or lost either accidentally or unlawfully, which can lead to a victim experiencing financial loss or psychological harm.

According to a study in 2020, UK police forces suffered more than 2,000 data breaches across the year.

However, data breaches within the force are a significant and growing concern as they can happen in many different ways.

Bethan Simons said: “Information leaks can have a huge impact on victims as they can lead to identity theft, fraud, harassment, and severe emotional distress.

“If the police force's failings caused a data breach and you suffered financial or emotional harm as a direct result, then you may have grounds to pursue a claim, and it's crucial to seek legal advice promptly.”

In 2024, the Information Commissioner’s Office (ICO) reprimanded West Midlands Police after they had incorrectly merged the records of two victims of crimes; however, one was also a suspect, and this was seen as a breach of the Data Protection Act 2018.

Mistakes like this can lead to inaccurate personal information being processed, ongoing investigations being affected, and data breach victims having their sensitive data leaked.