Data security incident trends | ICO

This page provides updates on data security breaches as a part of the UK’s General Data Protection Regulation (GDPR), aiming to assist organisations in understanding potential threats. Any breaches must be reported within 72 hours under Article 33 of the GDPR. Figures are given through Q3 2023, starting from Q2 2019; however, the data may contain discrepancies and inaccuracies. Guidance links for preventing breaches are provided.