Mon-Thu 09:00-19:00 | Fri 09:00-17:00

HNK Solicitors secure £11,500 for their client in data breach claim against Essex Police

Here at HNK, our solicitors have extensive experience in pursuing both data breach claims and civil actions against the police. In some cases, these two areas of expertise combine. Indeed, this is perhaps unsurprising. The police retain a great deal of sensitive information and thus must take extra care to ensure its appropriate storage.

The police’s failure to safeguard this information appropriately can have enormous consequences. From personal embarrassment to loss of employment prospects or damage to relationships, the impact for those whose data is exposed can be long-lasting and severe.

For this reason, it is important that those affected have some redress. This includes seeking appropriate compensation.

Last year, we accepted instruction from a client (‘S’) whose personal information – including details of an allegation for which he had been interviewed – had been exposed through mishandling by the police. We helped our client pursue a claim for a breach of the Data Protection Act 1998. We were ultimately successful in obtaining a substantial settlement of £11,500 for the client.

A police van parked on an empty street with houses visible in the background.


On December 5th, 2019, S was voluntarily interviewed by Essex Police Officers. He was informed during the interview that no further action would be taken. He was also told that this would be confirmed in writing.

On or around December 16th, our client received a Facebook message from A. They informed S that a letter addressed to him had been received at their address. This letter was about the allegation for which S had been interviewed.

Understandably, this was deeply distressing for S. It also suggested that there had been a significant data breach on the part of Essex Police.

The law

The Data Protection Act 1998 sets out strict requirements for organisations that store and process personal information. Among these are the requirements that the information is accurate and that it is kept up-to-date.

This law has subsequently been replaced by the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. These regulations continue to stress the importance of ensuring that any data stored is correct. In fact, “accuracy” is one of the seven key principles of the GDPR.

A laptop open on a wooden table with a blue and yellow GDPR logo on the screen and notebook and pen sat next to it.

The claim

In May 2020, S approached HNK Solicitors to act on his behalf in this matter. We accepted instruction on a no-win, no-fee basis. The case was taken up by Demi Drury, solicitor and Head of Actions Against the Police for HNK.

HNK claimed that Essex Police (the Defendant) had breached the Data Protection Act 1998 in two ways:

  • They had failed to keep up-to-date details of the claimant’s address
  • They had failed to take reasonable care that the letter was being sent to the correct address

The Defendant claimed that the letter was sent in a sealed envelope and that reasonable attempts were made to retrieve it. However, the Defendant partially admitted liability by accepting that the letter was sent to an incorrect address and that the information on their system had not been updated due to human error.


Though the Defendant had partially accepted liability, Demi Drury put forward submissions for the part of the claim that had not been admitted.

Demi Drury put to the Defendant that, although Officer A’s evidence confirms he wrote the Claimant’s address on the envelope, he did not write the Claimant’s name. This meant that the letter was not actually addressed to the Claimant. As a result of this, the occupant of the address (A) opened the envelope and read the letter. The letter discussed the allegation for which Claimant had previously been interviewed. Understandably, this caused the Claimant distress, humiliation and embarrassment. And it was a clear breach of data protection.

After negotiation settlements between the Defendant’s Legal Representative and Demi Drury, the Defendant agreed to pay the Claimant £11,500 in settlement of damages and legal costs.

A police van seen from the rear left with a metal barrier in the foreground.

Get in touch with HNK Solicitors

When a Data Controller has failed to keep up to date and accurate records of your personal information resulting in a breach of sensitive information, it may be possible for you to claim compensation.

To find out more about pursuing a claim for a civil action against the police or breach of data protection, visit our dedicated service pages. Alternatively, call us on 0151 271 5387 or email us at enquiries@hnksolicitors.com.


Related Posts

Get in touch

Fill out the below form and one of our advisors will get in touch to arrange a consultation about your claim.

Recent Articles

A raised fist of a protestor at a political demonstration
Does the new policing act affect my right to protest?
September 20, 2023
Picture of a Metropolitan Police station with a blue light outside
Metropolitan Police data breach: The Met Police suffer an IT security breach potentially affecting thousands of police officers and staff, which could do ‘incalculable damage in the wrong hands’
September 6, 2023
Image of a police interview. A woman police officer is interviewing a male who is holding his head in his hands. The officer is pointing to a picture on the table.
Can you be charged without being interviewed in the UK?
August 30, 2023
Call Us Claim Now