In August 2025, a serious data breach occurred involving the Church of England’s redress scheme, which was created to provide compensation and support to survivors of abuse. Law firm Kennedys, responsible for administering the scheme, accidentally exposed the details of almost 200 individuals and organisations – including the personal details of survivors of abuse.
The case was widely reported at the time and sparked widespread criticism and calls for accountability. The Church was urged to issue an apology, report the breach to the Information Commissioner's Office, and publish the steps it is taking to prevent future incidents.
If you were affected by this data breach, you may be entitled to compensation under the Data Protection Act 2018/UK GDPR.
How was the data leaked?
The law firm responsible for administering the redress scheme sent an email to around 194 recipients using the CC field rather than the BCC field to include all the recipients’ addresses. This mistake meant that everyone who received the email could see the email addresses of the other people it had been sent to. The list of people included survivors of Church of England-related abuse who had signed up for confidential updates regarding the scheme.
As a result of the error:
- People’s identities were exposed – many email addresses contain first and last names, or are clearly linked to people’s real names.
- Confidentiality was broken – people who had signed up for a mailing list had their details shared with almost 200 others.
- Trust was damaged – particularly for survivors of abuse who were already in a vulnerable position and believed their details would be protected.
What should I do if I was affected by the data breach?
Given the sensitive nature of the scheme, this was a very serious data protection breach. If your details were exposed, you may be able to claim compensation. Under the Data Protection Act 2018 and UK GDPR, you can claim for emotional distress caused by the breach.
Courts take breaches in sensitive contexts, such as abuse redress schemes, extremely seriously, and compensation awards in similar cases have ranged from £750 to £3,000, depending on individual circumstances.
What support can Complex Law provide?
At Complex Law Ltd, we specialise in data protection and data breach claims. We have successfully represented clients in highly sensitive and confidential cases, including those involving vulnerable individuals.
- Specialist expertise – Our solicitors focus on complex, fact-specific data breach claims.
- Proven results – We have secured compensation of up to £5,000 in similar cases.
- No-win, no-fee – You only pay if your claim is successful (capped at 25% incl. VAT).
- Personal service – Your claim will be handled by an experienced data breach solicitor.
- Strict confidentiality – We understand the importance of privacy and treat all cases with sensitivity.
If you have been affected by the Church of England redress scheme data breach, we can help you claim the compensation you deserve. Your enquiry will be handled with discretion, sensitivity and the care you deserve.
Contact us today to discuss your situation in confidence and find out how we can help.
.svg)
