The Department for Work and Pensions (DWP) has taken action against employees who inappropriately accessed personal data, resulting in some being fired and many facing disciplinary measures. The information was disclosed in response to an inquiry from Mike Wood, a Member of Parliament, regarding unauthorized access to personal data by DWP and executive agency officials since July 2024.
In their reply to the MP’s question, the DWP revealed that seven individuals were terminated due to unauthorized access, and over 200 employees had disciplinary cases opened against them within the last year. Andrew Western, Parliamentary Under-Secretary for the DWP, emphasized the department’s commitment to data protection, highlighting mandatory security training for all staff.
As of February 28, 2026, the DWP employs 94,876 individuals, with 227 facing disciplinary actions related to ‘Unauthorised Access’ in the past 12 months, leading to seven dismissals. The department indicated that further details on the matter would be challenging to provide due to data storage limitations.
The DWP’s acceptable use policy, last updated in April, outlines guidelines for preventing unauthorized access to personal data. It stresses the legal obligation to safeguard sensitive information and prohibits the misuse of official positions for personal gain. Additionally, it mandates compliance with information management policies and data protection guidelines.
Users are strictly prohibited from accessing personal data without a legitimate business need and are forbidden from viewing their own records or those of acquaintances on departmental systems. These regulations aim to maintain data security and ensure compliance with ethical standards.
