The Welsh government – which has about 5,500 full time equivalent staff – added all breaches are “reported, recorded and acted upon, no matter how small, with very few meeting the criteria for reporting to the ICO despite the level of personal data processing undertaken by the Welsh government.”
