Source · Select Committees · Public Accounts Committee

Recommendation 30

30 Deferred

BBC reports 27 data breaches since April 2020 with no ICO enforcement action.

Conclusion
The BBC told us it has had no data breaches that it has had to report to the Information Commissioner’s Office (ICO) this financial year. It has reported 27 data breaches since April 2020 and told us that the ICO had not taken any enforcement action against the BBC in relation to any of those cases. The BBC assured us that it monitors and manages all data incidents very carefully and that it raises incidents when it needs to.55 49 C&AG’s Report, para 17 50 Qq 72, 74 51 Q 91 52 Q 91 53 Q 92 54 C&AG’s Report, para 17 55 Qq 93–95; Letter dated 13 January from Leigh Tavaziva, BBC Group Chief Operating Officer, to PAC Chair BBC Digital 15
Government Response Summary
The government states that the BBC will write directly to the Committee regarding the recommendations in the report.
Government Response Deferred
HM Government Deferred
The Committee published its report on 28 April 2023 and the BBC will write directly to the Committee regarding the recommendations in the report.