Policy paper

Department for Education (DfE) data protection ICO audit: closure summary

DfE's response to the Information Commissioner's Office (ICO) audit and reprimand letter.

Applies to England

Documents

Details

The Information Commissioner’s Office (ICO) undertook a data protection audit of the Department for Education (DfE) in February and March 2020.

DfE extended the scope of the audit to include the sharing of data contained within the Learning Records Service (LRS) database, following a breach of the system. This was to allow the department to take action against ICO recommendations early.

ICO issued a formal reprimand of DfE in November 2022.

This is DfE’s response to the audit and the formal reprimand.

Published 19 October 2023