The ICO said the government had “failed to put appropriate technical and organisational measures in place to prevent the unauthorised disclosure of people’s information”.
Speaking at the time, the blunder was described as “inexcusable” by the privacy rights group Big Brother Watch. “It's extremely worrying to see that the government doesn't have a basic grip on data protection,” said the organisation's director, Silkie Carlo.
More than a dozen Ministry of Defence employees also had their personal addresses made public, along with senior counter-terrorism officers.
TV cook Nadiya Hussain, England cricketer Ben Stokes and the former Ofcom boss, Sharon White, were also on the list.
‘Frosty’ relations
The £500,000 fine comes at a time of stormy relations between the Cabinet Office and the information watchdog. Last week, the outgoing information commissioner, Elizabeth Denham, criticised the department for its record on transparency.
She said its actions “increase suspicion” about a secretive unit called the Clearing House, which vets Freedom of Information (FOI) requests.
Denham was speaking to the Public Administration and Constitutional Affairs Committee, which is investigating the unit following allegations that it “blacklists” journalists.
The inquiry follows investigations by openDemocracy, which revealed how the Clearing House interfered with requests about the Grenfell Tower tragedy and showed that political advisers were allowed to “approve” FOI responses.
The Clearing House was also at the centre of a landmark legal victory by openDemocracy earlier this year. Ruling against the government, a judge criticised the “profound lack of transparency” over its FOI unit, saying that it might “extend to ministers”.
Today, the Cabinet Office apologised for the data breach and said it took the criticisms "very seriously".
"The Cabinet Office would like to reiterate our apology for this incident," a spokesperson said. "We took action to mitigate any potential harm by immediately informing the Information Commissioner and everyone affected by the breach.
"We take the findings of the Information Commissioner very seriously, and have completed an internal review as well as implemented a number of measures to ensure this does not happen again. This includes a review of the overall security of the system, information management training and improving internal processes for how data is handled by the honours team."
Comments
We encourage anyone to comment, please consult the oD commenting guidelines if you have any questions.