VerbatimParliament, as it happens

Ministry of Defence: Data Protection

Asked by Rupert LoweRestore BritainMinistry of DefenceTabled Answered 4 November 2025UIN 85474

The question

To ask the Secretary of State for Defence, how many personal data breaches were reported by his Department to the Information Commissioner’s Office in each year since 2020; and how of those resulted in enforcement action.

Answered by Luke Pollard

22 personal data incidents have been reported by the Ministry of Defence to the Information Commissioner’s Office (ICO) since 2020.

Three of those resulted in enforcement action.

The personal data incidents reported to the ICO are listed in the Department’s Annual Report and Accounts:

Financial Year

Number of personal data incidents reported to the ICO

Incidents resulting in enforcement action

2020-2021

7

0

2021-2022

12

3

2022-2023

2

0

2023-2024

1

0

The Annual Report and Accounts for 2024-2025 has not yet been published. This report will include an additional incident identified in 2023 which happened in February 2022 but was not reported previously due to an injunction being in place.

Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →

Open this question in Verbatim →

Every written question, searchable

155,000 questions tabled since the election, with the answer each department gave — and the ones still unanswered, with the clock running. Free to search.

Search written questions →Read on Verbatim