Info Gov

The Information Commissioner's Office (ICO) has said it is aware of reports that an 'urban explorer' discovered sensitive council documents left in an unoccupied building.

West Sussex Council confirmed in a statement last week (16 July) that it had referred the incident to the information watchdog, but insisted the building was not abandoned and was "fully secured". The ICO has now said it was "assessing the information" provided by the council.

Urban explorers are individuals who explore abandoned or off-limits buildings, often documenting their excursions online. The council said it was aware of the of the unauthorised entry by a member of the public to two county council buildings in Chichester, and claims that the person found documents containing personal sensitive data inside.

It also said it was aware of claims that pictures of some of those documents were posted online. West Sussex insisted the buildings were not abandoned, but "unoccupied" and claimed that both buildings had been "fully secured" and were monitored regularly.

A council spokesperson added: "The council is treating this situation seriously and is taking swift action to address it. Steps are being taken to confirm that all material stored is done so securely, with material held at these two locations being relocated while investigations into how access was gained are carried out.

"A thorough review of security at all buildings in our estate will be completed as a matter of urgency and action will be taken where needed to safeguard against further unauthorised entry."

Also in this section

Oct 19, 2026

ICO audit finds "limited" assurance over Derbyshire Constabulary data protection governance

The Information Commissioner's Office (ICO) has given Derbyshire Constabulary a "limited" assurance rating for governance and accountability following a consensual data protection audit, finding that the force does not hold a comprehensive record of processing activities and is not yet meeting the logging requirements for law enforcement processing under section 62 of the Data Protection Act 2018.
Oct 19, 2026

DSG to pay £200,000 as consent order ends long-running cyber attack penalty dispute with ICO

The Information Commission (ICO) has confirmed that its long-running enforcement action against DSG Retail Ltd over the 2017 malware attack on Currys PC World and Dixons Travel tills has ended, after the First-tier Tribunal approved a consent order under which the retailer will pay £200,000 of the monetary penalty imposed by the tribunal rather than contest a fresh hearing.
Oct 14, 2026

ICO reprimands Met Police over unlawful data sharing

The Metropolitan Police Service (MPS) has been reprimanded by the Information Commission’s Office (ICO) after officers and staff unlawfully shared personal information through an unapproved third-party platform used to identify suspected shoplifters.