107/25 Action required: This is a reminder to all ESF 2014 to 2020 Programme Beneficiaries of their on-going responsibilities if their organisation experiences a data protection breach
Updated 21 February 2025
© Crown copyright 2025
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/esf-action-notes-2014-to-2020-programme/10725-action-required-this-is-a-reminder-to-all-esf-2014-to-2020-programme-beneficiaries-of-their-on-going-responsibilities-if-their-organisation-e
Date Issued: 21 February 2025
1. Who should read
All European Social Fund (ESF) National and Local Co Financing Organisations (CFOs), Intermediate Bodies (IBs), Beneficiary Organisations, ESF Division and Greater London Authority.
2. Background
This is a reminder to all ESF 2014 to 2020 Programme Beneficiaries of their on-going responsibilities if their organisation experiences a data protection breach.
3. Action
All ESF Beneficiaries should refer to the latest guidance published on the Information Commissioner’s Office website; Information Commissioner’s Office (ICO) to understand what constitutes a Data Breach.
A personal data breach is defined as a security incident that compromises the confidentiality, integrity, or availability of personal data. This includes incidents leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. Breaches can result from both accidental and deliberate actions and are not limited to the mere loss of personal data.
If your organisation suffers a Data Breach, then under GDPR Article 33(2) you must inform the Department for Work and Pensions (DWP) without delay.
DWP has appointed a Data Protection Officer. The role of the Data Protection Officer is to make sure DWP is compliant with data protection laws and to act as a point of contact for data subjects.
As part of the formal closure of the ESF 2014 to 2020 Programme the previous email in-box for Data Breaches relating to the European Social Fund 2014 tob2020 Programme: esfdata.breach@dwp.gov.uk will close on 28 February.
ESF beneficiaries should note all future Data Breaches should be emailed to: data.protectionofficer@dwp.gov.uk. All will be actioned as per DWP Guidelines.
4. Contact
For any queries on this Action Note, please contact: esf.2014-2020@dwp.gov.uk