From the Information Commissioner’s Office:
An undertaking to comply with the seventh data protection principle has been signed by Pembrokeshire County Council.
This follows an incident where sensitive personal data relating to a number of individuals was not properly redacted from a response to a subject access request. On investigation the ICO discovered that although the council had appropriate procedures in place which should have prevented this breach, the request had not been handled in line with these procedures and there had been a lack of proper oversight of the request.