Our year at a glance
Data protection casework
More than half of data protection cases required us to simply provide advice and guidance. In some cases this advice was relatively straightforward, in others extremely complex. In the remainder of cases, we considered whether a breach of the Data Protection Act or Privacy and Electronic Communications Regulations was likely to have occurred.
In one third (35.28%) of these cases we decided a breach was likely to have occurred and the organisation took remedial action in three quarters (77.49%) of these cases. Such remedial actions may include a data controller correcting an individual’s record, implementing a data protection policy or training staff.
Time to close cases |
Target |
Actual |
| 30 days or less | 40% | 66% |
| 90 days or less | 90% | 91% |
| 180 days or less | 98% | 98% |
| Received | Closed | Work in Progress |
| 23,988 | 24,084 | 1,978 |
