ICO Data Breach Investigation Outcome

Roedd y cais yn llwyddiannus.

Dear University of East Anglia,

In regards to the data breach which your institution suffered in June 2017 whereby an email was mistakenly sent to 298 American Studies undergraduates containing details of 42 students with extenuating circumstances. Please can you disclose the following information:

1. When did The University of East Anglia report this incident to the ICO
2. Transcript of any communications to between the ICO and The University of East Anglia in response to the breach outlined above
3. Has the ICO began an investigation into this incident
3.1. If so what action did the ICO take against The University of East Anglia

Yours faithfully,


Freedom of Information, University of East Anglia

8 Atodiad

Dear Ibrahim
Freedom of Information Act 2000 – information request acknowledgement (UEA
ref: FOI_17-234)
Thank you for your request for information received on 20 September 2017.
Your request is being considered and you will receive our response within
the statutory timescale of 20 working days as defined by the [1]Freedom of
Information Act 2000.
For your information, the Act includes a number of exemptions which may
prevent release of some or all of the information you have requested. If
we withhold any information we will provide a full explanation of the
exemption(s) applied, and include information on your right of appeal.
If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken on whether or not to
release the information under the Act.
If the requested information held by the University consists of, or forms
part of a [2]dataset, the University will, so far as reasonably
practicable, provide that information in a reusable electronic format,
based on open standards  -e.g. a Comma Separated Value (CSV) file - and
subject to an approved licence governing future use of the information.
If you require information (dataset or otherwise) to be provided in an
alternative format, e.g. language, audio, large print or paper copy please
let us know.
If you have any queries or concerns then please contact us at
[3][University of East Anglia request email], or by telephone on 01603 59 2431. Further information on
the Act is also available from the Information Commissioner’s Office at: 
[4]www.ico.org.uk, telephone: 0303 123 1113
Please quote our reference given at the top of this email in all
Kind regards,
Sent on behalf of Ellen Paterson

>Please use this email address for all replies to this request:
>[22][FOI #433145 email]
>Is [23][University of East Anglia request email] the wrong address for Freedom of Information
requests to
>University of East Anglia? If so, please contact us using this form:
>Disclaimer: This message and any reply that you make will be published on
>internet. Our privacy and copyright policies:
>For more detailed guidance on safely disclosing information, read the
>advice from the ICO:
>If you find this service useful as an FOI officer, please ask your web
>to link to us from your organisation's FOI page.


Visible links
1. http://www.legislation.gov.uk/ukpga/2000...
2. http://ico.org.uk/~/media/documents/libr...
3. mailto:[University of East Anglia request email]
4. http://www.ico.org.uk/
5. http://www.uea.ac.uk/
6. http://www.uea.ac.uk/
7. http://www.facebook.com/ueaofficial
8. http://www.facebook.com/ueaofficial
9. http://www.twitter.com/uniofeastanglia
10. http://www.twitter.com/uniofeastanglia
11. http://uniofeastanglia.tumblr.com/
12. http://uniofeastanglia.tumblr.com/
13. http://www.flickr.com/uniofeastanglia
14. http://www.flickr.com/uniofeastanglia
15. http://www.linkedin.com/edu/school?id=12...
16. http://www.linkedin.com/edu/school?id=12...
17. http://www.youtube.com/ueaofficial
18. http://www.youtube.com/ueaofficial
19. http://instagram.com/uniofeastanglia
20. http://instagram.com/uniofeastanglia
21. mailto:[FOI #433145 email]
22. mailto:[FOI #433145 email]
23. mailto:[University of East Anglia request email]
24. https://www.whatdotheyknow.com/change_re...
25. https://www.whatdotheyknow.com/help/offi...
26. https://www.whatdotheyknow.com/help/ico-...

Freedom of Information, University of East Anglia

9 Atodiad



Further to your request of 20 September 2017, we have prepared response
but would ask that you provide a valid name to respond to as mandated by
s.8(1) of the Act.  Absent a full name, your request is legally not valid
and we are under no obligation to provide a response.  However, once a
name is provide, we will proceed with a response to your request.  For
your information, guidance on what constitutes a valid request is provided
by the Information Commissioners office her:
We would, in particular, draw your attention to paragraphs 15-31 of the


Yours, Dave Palmer


Dear Freedom of Information,

Apologies I thought I did include it, my full name is Ibrahim Güney

Yours sincerely,


Freedom of Information, University of East Anglia

12 Atodiad

Dear Ibrahim Guney


Please find attached a response to your request received on 20 September
2017 under the Freedom of Information Act 2000.

Should you have any questions or concerns, please do not hesitate to
contact us.


We would like to know if our handling of your FOI request has met your
expectations. To help us improve our service please complete our short
[1]online form.  


Kind regards,



Sent on behalf of Ellen Paterson


dangos adrannau a ddyfynnir