The Department for Work and Pensions (DWP) has taken action against employees found to have inappropriately accessed personal data. The department disclosed that several staff members were fired for this misconduct, and a significant number faced disciplinary measures.
This information was revealed in response to inquiries from Mike Wood, a Member of Parliament, who raised concerns about unauthorized access to personal data by DWP officials. According to the DWP, seven individuals were dismissed due to unauthorized access, and over 200 employees underwent disciplinary proceedings in the past year.
Andrew Western, Parliamentary Under-Secretary for the Department for Work and Pensions, emphasized the department’s commitment to safeguarding personal data. He stated that all staff are required to report any suspected breaches, and security training is mandatory on an annual basis.
As of February 28, 2026, the DWP has nearly 95,000 employees, with 227 individuals facing disciplinary actions related to unauthorized access, leading to seven dismissals. The department clarified that certain data requested by the MP would be challenging to provide due to the decentralized nature of DWP systems.
The DWP’s acceptable use policy, last updated in April, outlines guidelines for preventing unauthorized access. It underscores the legal obligation to protect personal and sensitive information and prohibits the misuse of official positions for personal gain. Employees are required to handle information in line with business needs and comply with various policies and guidelines.
Furthermore, the policy prohibits unauthorized access to personal data unless it is essential for job responsibilities. It strictly prohibits accessing personal records of oneself, acquaintances, or any other individuals on departmental systems.
