UK report reveals high data breaches in education and childcare sector in 2023

Hayes Connor, a UK data breach solicitor, has released a study showing that the education and childcare sector had the second-highest number of data breaches in 2023, following the health sector. 

Based on data from the Information Commissioner's Office (ICO), the study points to persistent compliance issues and highlights the need for better data handling practices within the sector.

According to the report, the education and childcare sector accounted for 14.44% of all reported data breaches last year. The breaches predominantly involved personal identifiable information, with 85.06% of incidents in this category. Health data was also significantly compromised.

The study reveals that 562 data breaches last year involved children's data, which is particularly concerning due to the sensitivity of such information. The main causes of breaches were data being sent to the wrong recipient and unauthorised access.

The report indicates a serious compliance issue within the sector, with 36.94% of data breaches reported after the 72-hour deadline required by the General Data Protection Regulation (GDPR), which could lead to substantial fines.

Richard Forrest, Legal Director at Hayes Connor, emphasised the need for sector improvements:

 "Despite advancements in regulatory frameworks and the introduction of stricter compliance mechanisms, the frequency of data breaches remains a critical concern. 

“Another year, another representation of how many organisations across all sectors are still failing to implement effective security protocols, leaving personal data vulnerable to breaches which have significant legal and financial repercussions for the entities involved.”

The analysis underlines the vulnerabilities within the education and childcare sectors. 

Forrest concludes:

“Despite regulatory advancements, and the introduction of stricter compliance mechanisms, the rate of data breaches remains a serious concern. The recent ICO trends portray a continuous need for vigilance and updated compliance strategies from businesses, especially in how they manage and protect personal data against emerging cyber threats and human error.”