Department for Education (DfE) data protection ICO audit: closure summary
DfE's response to the Information Commissioner's Office (ICO) audit and reprimand letter.
Applies to England
Documents
Details
The Information Commissioner’s Office (ICO) undertook a data protection audit of the Department for Education (DfE) in February and March 2020.
DfE extended the scope of the audit to include the sharing of data contained within the Learning Records Service (LRS) database, following a breach of the system. This was to allow the department to take action against ICO recommendations early.
ICO issued a formal reprimand of DfE in November 2022.
This is DfE’s response to the audit and the formal reprimand.