Cambridgeshire County Council (25 029 745)

Category : Other Categories > Other

Decision : Closed after initial enquiries

Decision date : 19 May 2026

The Ombudsman's final decision:

Summary: We will not investigate this complaint about a data breach as it is best dealt with by the Information Commissioner’s Office. It is reasonable to expect the complainant to take court action for the financial remedy she seeks.

The complaint

  1. Miss X complains the Council wrongly disclosed sensitive personal information to third parties. Miss X says this had a significant impact on her mental health, and caused considerable distress and conflict. Miss X asks the Ombudsman to review the financial remedy the Council has offered, which she considers does not reflect the seriousness of the damage caused, and to assess whether the Council’s actions were consistent with data protection principles.

Back to top

The Ombudsman’s role and powers

  1. The Local Government Act 1974 sets out our powers but also imposes restrictions on what we can investigate.
  2. We normally expect someone to refer the matter to the Information Commissioner if they have a complaint about data protection. However, we may decide to investigate if we think there are good reasons. (Local Government Act 1974, section 24A(6), as amended)
  3. The law says we cannot normally investigate a complaint when someone could take the matter to court. However, we may decide to investigate if we consider it would be unreasonable to expect the person to go to court. (Local Government Act 1974, section 26(6)(c), as amended)

Back to top

How I considered this complaint

  1. I considered information provided by the complainant.
  2. I considered the Ombudsman’s Assessment Code.

Back to top

My assessment

  1. The Information Commissioner's Office (ICO) is the UK's independent regulator in respect of data protection matters. It is best placed to assess the Council's actions in this case and to decide whether it should take corrective action. As such, we will not investigate.
  2. UK data protection law allows for compensation claims to be made in court for damage caused following data protection breaches. There is a procedure open to Miss X to make her own claim in court or she could seek the help of a solicitor, some of whom take on such cases on a ‘no win - no fee’ basis. We are not empowered to determine damage claims or make compensation awards. It is reasonable therefore to expect Miss X to resort court action for the compensation she seeks.

Back to top

Final decision

  1. We will not investigate Miss X’s complaint because it is best dealt with by the ICO and the level of compensation her case merits is for the courts to decide.

Back to top

Investigator's decision on behalf of the Ombudsman

Print this page

LGO logogram

Review your privacy settings

Required cookies

These cookies enable the website to function properly. You can only disable these by changing your browser preferences, but this will affect how the website performs.

View required cookies

Analytical cookies

Google Analytics cookies help us improve the performance of the website by understanding how visitors use the site.
We recommend you set these 'ON'.

View analytical cookies

In using Google Analytics, we do not collect or store personal information that could identify you (for example your name or address). We do not allow Google to use or share our analytics data. Google has developed a tool to help you opt out of Google Analytics cookies.

Privacy settings