UK council faces data breach claim after mishandling trans complaints
The Register
February 22, 2026
AI-Generated Deep Dive Summary
A UK councillor has criticized her local authority for a serious data breach after personal details of individuals who filed complaints against her were shared without consent. The incident occurred following a series of ten formal grievances lodged against Cllr Dulcie Tudor, triggered by her controversial remarks during a council meeting in November 2025. During the discussion about the UK Supreme Court's ruling on gender identity, which clarified that legal gender is determined by biological sex, Tudor asked whether a trans woman could be considered a "real" woman. This led to widespread condemnation and a flood of complaints.
The breach occurred when Cornwall Council inadvertently exposed sensitive personal information from all ten complainants, including names, addresses, email addresses, and phone numbers, in documents shared with Cllr Tudor. Despite the council's claim that the files were redacted as attachments, Tudor claims she was able to view the unredacted details upon opening the files. This included identifying which complainants were council officers or elected councillors, despite their requests for anonymity.
The councillor expressed shock over the situation, stating that such access to complainant data is inappropriate and potentially compromising for those who face discrimination or harassment due to their gender identity. The incident raises questions about how local authorities handle sensitive information and whether proper safeguards are in place to protect individuals' privacy rights. This case highlights the risks associated with poor data management practices, particularly when dealing with complaints related to transgender issues, where individuals may already be vulnerable to stigma and discrimination.
This story is significant for tech readers as it underscores the importance of robust data protection protocols and the potential consequences of failing to implement them properly. The incident also brings attention to ongoing debates around gender identity
Verticals
tech
Originally published on The Register on 2/22/2026