The Ombudsman's final decision
Summary: We will not investigate Miss X’s complaint about a data breach by the Council. This is because complaints about data matters, such as this, are best considered by the Information Commissioner’s Office.
The complaint
The complainant, Miss X, complains the Council committed a data breach when it sent confidential documents to her previous address.
The Ombudsman’s role and powers
We investigate complaints about ‘maladministration’ and ‘service failure’, which we call ‘fault’. We must also consider whether any fault has had an adverse effect on the person making the complaint, which we call ‘injustice’. We provide a free service, but must use public money carefully. We do not start an investigation if we decide the tests set out in our Assessment Code are not met. (Local Government Act 1974, section 24A(6), as amended) We do not start an investigation if we decide there is another body better placed to consider this complaint. (Local Government Act 1974, section 24A(6), as amended, section 34(B)) We normally expect someone to refer the matter to the Information Commissioner if they have a complaint about data protection. However, we may decide to investigate if we think there are good reasons. (Local Government Act 1974, section 24A(6), as amended)
How I considered this complaint
I considered information provided by the complainant and the Council.
I considered the Ombudsman’s Assessment Code.
My assessment
Miss X complained to the Council that it committed a data breach when it sent documents containing confidential information to Miss X’s previous address, in error.
The Council accepted there had been a data breach and upheld Miss X’s complaint. It signposted Miss X both to this office and to the Information Commissioner’s Office (ICO), if she remained dissatisfied with its final response to her complaint.
We will not investigate Miss X’s complaint. This is because it is a complaint about a data matter which is best considered by the ICO as it is the body set up to consider data matters such as this. We will not also consider it.
Final decision
We will not investigate Miss X’s complaint because it is about a data matter which is best considered and decided by ICO.
Investigator's decision on behalf of the Ombudsman