In 2026, the Information Commissioner’s Office (ICO) issued a formal reprimand to Staffordshire Police after the constabulary unlawfully disclosed the confidential residential address of a domestic abuse victim to her alleged abuser.
The regulatory investigation established that the catastrophic data breach took place in March 2024. Staffordshire Police had issued a Domestic Violence Protection Notice (DVPN)—an emergency legal safeguarding mechanism designed to bar suspected perpetrators from contacting or approaching victims following incidents of domestic violence.
However, when officers formally served the protection notice upon the alleged abuser following his release from prison custody, the document explicitly detailed the victim’s current home address. The victim had previously moved residence on several occasions specifically to flee the perpetrator and protect her family. The address was completely unknown to the individual until police handed over the document.
The ICO launched a formal inquiry into the force’s information governance, discovering that Staffordshire Police failed to implement appropriate organisational safeguards to prevent the unlawful release of sensitive personal data. The investigation highlighted widespread non-compliance in basic police education, noting inadequate completion rates for mandatory staff training covering both general data protection regulations and the statutory administration of DVPNs.
Condemning the breach, Sally-Anne Poole, head of investigations at the ICO, stated:
“Data breaches of this kind are never just technical failures. When someone comes forward as a victim of domestic abuse, they are placing their trust and their safety in the hands of the police. What might seem like a simple error, such as including an address in a document that didn’t need it, can expose someone to real and immediate danger. In this case, the very notice designed to protect them instead put them at risk and left them fearing that they would have to relocate their family once again. This case is a reminder that getting the basics right is not optional. Every organisation must be doing everything necessary to protect the personal information in their care, especially where there is a known risk to someone’s safety.”
Responding to the statutory reprimand, Deputy Chief Constable Caroline Marsh of Staffordshire Police acknowledged the force’s failure:
“We fully recognise the impact this incident had on the victim and sincerely regret the distress and disruption this caused. We remain committed to learning from this case. This incident related to a Domestic Violence Protection Notice issued in 2024, and since it has been subject to detailed review, and has informed a significant programme of improvement across our domestic abuse response.”
Deputy Chief Constable Marsh outlined that over the preceding 18 months, the force introduced dedicated strategic and tactical leads alongside a full-time domestic abuse chief inspector to enforce supervisory accountability. Additional measures have included rolling out the Domestic Abuse Risk Assessment (DARA) process, tightening supervisory oversight on all DVPN applications, and updating internal operating procedures to strictly prohibit the inclusion of undisclosed addresses on paperwork served to alleged offenders.
Image – Anonymous Artist Impression
For the latest updates and offender details, follow us on the Offender Database Facebook Page. If you or anyone you know has been affected by the individuals highlighted on this website, please report them to the Police on 101 (999 in an emergency) or visit their online resources for further details on how to report a crime. You can also report to Crimestoppers if you wish to remain completely anonymous. There is help available on our support links page.