The Department for Work and Pensions (DWP) has taken action against individuals found to have improperly accessed personal data, resulting in terminations and disciplinary measures. In response to a query from Conservative MP Mike Wood, the DWP acknowledged that seven employees had been dismissed for unauthorized access, with over 200 facing disciplinary actions over the past year.
Andrew Western, a Parliamentary Under-Secretary at the DWP, emphasized the organization’s commitment to safeguarding personal data. He highlighted the mandatory security training for staff and the importance of reporting any breaches promptly. As of February 28, 2026, out of the DWP’s 94,876 employees, 227 individuals were involved in disciplinary cases related to unauthorized access, leading to seven dismissals. Detailed data on other aspects of the query was deemed not readily available due to system limitations.
The DWP’s acceptable use policy, last updated in April, outlines guidelines for preventing unauthorized access to sensitive information. It stresses the legal obligation to protect personal data and prohibits the misuse of official positions for personal gain. Users are required to handle information in accordance with business requirements and established policies, refraining from accessing personal data without a valid job-related purpose.
The policy also explicitly prohibits accessing personal records of oneself, acquaintances, or family members on DWP systems, underscoring the importance of maintaining data integrity and compliance with information management protocols.