Reporting data breaches

If you suspect a data breach has occurred report it immediately to:


  • Information Compliance Team (ICT): for all potential breaches involving personal data e.g. mis-directed emails or failure to BCC, granting access to personal data incorrectly, paperwork left unattended on photocopier/printer or in open areas, unrelated information added to an individual’s personal records, or permanently destroying personal data prematurely.


  • Oxford University Computer Emergency Response Team (OxCERT): or 01865 (2)82222 for IT and information security related incidents e.g. malware, ransomware, phishing emails, compromised passwords, or lost or stolen devices. For further information, please see the Information Security (InfoSec) website at:   


If you are a member of staff looking for advice on data breaches, please visit the link below: 

Staff guidance on data breaches