107/25 Action required: This is a reminder to all ESF 2014 to 2020 Programme Beneficiaries of their on-going responsibilities if their organisation experiences a data protection breach
Updated 21 February 2025
漏 Crown copyright 2025
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: [email protected].
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at /government/publications/esf-action-notes-2014-to-2020-programme/10725-action-required-this-is-a-reminder-to-all-esf-2014-to-2020-programme-beneficiaries-of-their-on-going-responsibilities-if-their-organisation-e
Date Issued: 聽21 February 2025聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽
1. Who should read
All European Social Fund (ESF) National and Local Co Financing Organisations (CFOs), Intermediate Bodies (IBs), Beneficiary Organisations, ESF Division and Greater London Authority.
2. Background
This is a reminder to all ESF 2014 to 2020 Programme Beneficiaries of their on-going responsibilities if their organisation experiences a data protection breach.聽
3. Action
All ESF Beneficiaries should refer to the latest guidance published on the Information Commissioner鈥檚 Office website; to understand what constitutes a Data Breach.聽
A personal data breach is defined as a security incident that compromises the confidentiality, integrity, or availability of personal data. This includes incidents leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. Breaches can result from both accidental and deliberate actions and are not limited to the mere loss of personal data.聽聽
If your organisation suffers a Data Breach, then under GDPR Article 33(2) you must inform the Department for Work and Pensions (DWP) without delay.聽
DWP has appointed a Data Protection Officer. The role of the Data Protection Officer is to make sure DWP is compliant with data protection laws and to act as a point of contact for data subjects.
As part of the formal closure of the ESF 2014 to 2020 Programme the previous email in-box for Data Breaches relating to the European Social Fund 2014 tob2020 Programme: [email protected] will close on 28 February.
ESF beneficiaries should note all future Data Breaches should be emailed to: [email protected].聽 All will be actioned as per DWP 骋耻颈诲别濒颈苍别蝉.听听
4. Contact
For any queries on this Action Note, please contact: [email protected]