‘We’re sorry for data breach’

By Elgan Hearn, Local Democracy Reporter

Apologies have been made to people who had their personal data splashed across a Powys County Council (PCC) web page.

The breach of data happened on April 22 when names and address attached to a letter on direct payments was published on the website.

The letter was taken down the following day when PCC were made aware of the issue.

But, those affected have now complained about the breach, and it was brought to the attention of Cllr Joy Jones who said: “Powys have dropped the ball again and I have had to deal with some very upset residents. This comes at a time when there is enough stress about. They don’t need this.”

A PCC spokesperson confirmed that a template letter containing a number of service users’ names and addresses was placed on the council’s website by mistake.

They explained it had been part of a move to ensure information about Covid-19 support was made available as widely and quickly as possible.

Head of Commissioning for Social Services, Dylan Owen, said: “We felt it appropriate to inform you of the breach in order that you are able to be extra vigilant over unexpected callers or letters.

“We sincerely apologise for this personal data breach which has been formally investigated in line with council policy. It has been determined that the breach occurred due to human error when publishing template letters.

“Measures have now been put in place to reduce the risk of this occurring again. This includes all information leaving the department now being checked by two people before it is published.”

Direct Payments allow people to arrange care or support services themselves instead of receiving a package of care or support arranged by the local authority.