The Department for Work and Pensions (DWP) has taken action against individuals found to have inappropriately accessed personal data, leading to the dismissal of seven employees. In response to a query from Conservative MP Mike Wood, the DWP disclosed that over 200 workers faced disciplinary measures in the past year.
Parliamentary Under-Secretary Andrew Western emphasized the department’s commitment to data protection, highlighting mandatory security training for all staff and the obligation to report any suspected breaches. As of February 28, 2026, out of 94,876 DWP employees, 227 individuals were involved in disciplinary cases related to unauthorized access.
The DWP’s acceptable use policy, last updated in April, outlines the importance of safeguarding personal and sensitive information. It prohibits unauthorized access to personal data without a legitimate business need, stressing compliance with information management policies and ethical standards.
Users are reminded not to access personal data without proper authorization, including their own records or those of acquaintances, on any departmental platform. The policy underscores the responsibility of employees, contractors, and consultants to handle information in accordance with business requirements and regulatory guidelines.