Business & Technology
Paperwork breaches hit 11,141 in UK over five years
Paperwork-related data breaches reported to the Information Commissioner’s Office totalled 11,141 between 2020 and 2025, according to an Officeology analysis. Of those, 2,103 involved employee data.
The figures point to a persistent stream of non-digital breaches at a time when many organisations have focused security spending on cyber threats. Officeology’s review of ICO incident data found that the breaches involved paperwork being lost, stolen or disposed of incorrectly.
In 2025 alone, 1,820 paperwork-related breaches were reported to the regulator, the analysis found. Of those, 330 incidents, or 18%, involved employee data, including personal identifiers, health and financial information.
Based on the size of organisations that recorded those incidents, as many as 28,000 employees could have been affected in 2025. The estimate underscores the continued exposure created by paper records in workplaces that may otherwise have moved much of their operations online.
Reporting Delays
The review also examined how quickly organisations reported paperwork breaches to the ICO. Under UK GDPR rules, personal data breaches must be reported within 72 hours of an organisation becoming aware of them.
In 2025, that deadline was missed in 41% of paperwork cases. In 399 incidents, organisations took one week or more to alert the ICO, while in 351 cases reporting took between 72 hours and one week.
Employee data breaches showed a similar pattern. In 39% of those incidents, or 130 cases, the report was made after the 72-hour deadline.
Data Types
Basic personal identifiers were the most common type of information exposed in paperwork incidents. In 2025, 708 breaches involved details such as names, addresses and dates of birth, representing 39% of all paperwork cases reviewed.
Health data was the next most common category, accounting for 23% of incidents. Among employee data breaches, a third of cases, or 112 incidents, involved the loss, theft or incorrect disposal of basic identifying information.
The ICO classifies paperwork incidents as non-cyber breaches. It defines these as “a type of breach that does not have a clear online or technological element which involves a third party with malicious intent.”
Few Investigations
Only a small minority of paper-based breaches led to formal regulatory investigations. Between 2020 and 2025, fewer than 5% of paperwork incidents resulted in a formal investigation, according to the figures.
In 2025, 12 paperwork-related breaches were referred to investigation teams to determine what action, if any, was appropriate. That was down from 55 in 2024.
In 1,429 paperwork mishandling cases last year, the ICO chose not to use its formal powers and instead provided guidance and advice. Only one incident involving employee data was formally investigated in 2025.
The broader pattern suggests paperwork remains a steady source of data loss despite the wider shift to digital systems. Incident levels have stayed relatively stable over the past five years, even as paper records and communications have gradually declined in many sectors.
Adam Butler, chief executive of Officeology, said: “Our analysis of ICO data has highlighted areas of concern, specifically businesses using paper-based systems.
“While cybersecurity dominates the news, physical theft, loss or the incorrect disposal of paper records remains a significant risk to companies’ data security, including their own employees’ private information.
“GDPR legislation, the legal framework that aims to protect the privacy and personal data of individuals, is technology-neutral and applies whether data is processed online or offline. It covers any filing system intended to be used in a searchable way.
“Paper-based processes are inherently more vulnerable to human error. Adopting document management systems allows businesses to streamline workflows and store information in secure, centralised environments, helping organisations to better safeguard data and maintain compliance.”
Business & Technology
AI adoption boosts UK accountants’ profits, Xero says
KAREN JOY BACUDO
Finance Editor
Xero has published UK research linking higher profitability at accounting and bookkeeping firms to embedded use of artificial intelligence. The study found that the most profitable firms recorded net profit margins more than twice those of lower-margin peers.
The findings are based on a survey of 520 independent senior accountants and bookkeepers across the UK. It defines top performers as firms with net profit margins of 41% or above.
The report suggests AI is generating measurable time savings across the profession, with the biggest gains concentrated among firms that have moved from trial use to routine adoption in daily workflows. Across all surveyed practices, AI saved an average of 7.1 hours a week, which respondents estimated was worth about GBP £108,000 a year in staff time.
Among top-performing firms, the gains were significantly higher. Practises that had embedded AI into day-to-day work reported average savings of 10.6 hours a week and an estimated GBP £202,000 a year.
A clear divide also emerged in process discipline. Among practices actively using AI in daily workflows, 87% said their core business processes were well documented and regularly updated. That compares with 18% of practices not planning to use AI.
Advisory focus
The research points to advisory work as one of the main uses for time freed up by automation. Advisory had the highest reported profit margin of any service offered by UK firms, at 51%, yet only just over half of practices currently provide it.
Capacity remains a constraint for many. Nineteen per cent of firms said limited capacity was a barrier to offering advisory services, while three in five practices said they were directing AI-related time savings towards that work.
The data also suggests firms do not broadly expect AI to trigger staff cuts. Only 5% of UK practices said they expected AI to reduce headcount within the next year, indicating that most see the technology as a way to reallocate staff time rather than replace roles.
Kate Hayward outlined the broader patterns identified in the research.
“The qualities that define the successful modern practice are clear. We’re seeing firms make more deliberate decisions over which clients to serve, how to build teams around them, which tools to use, and never letting billable work go untracked – all contributing to major gains across the industry. The data speaks for itself when it comes to AI. It’s about freeing up time to bring this industry’s most valuable skills to the surface, it’s not about replacing people. The story here is what it allows firms to do next, whether that’s advisory, deeper client relationships or growth. Our data shows that while AI accelerates the positive changes already underway, getting the essentials right has never been more important,” said Kate Hayward, UK Managing Director, Xero.
Hiring shift
Beyond AI, the report argues that more profitable firms are reshaping hiring, team structures and pricing. Nearly two-thirds of firms, or 63%, said they are changing what they look for when recruiting.
Soft skills and relationship management were cited by 28% of respondents, while 27% pointed to technology fluency. Both ranked ahead of traditional accounting skills as firms reassess the mix of expertise needed within practices.
Top-performing firms were also more likely to recruit specialists not historically associated with accountancy practices. The survey found that 34% were hiring non-traditional roles such as data analysts and tax technologists, compared with 18% across the wider market.
That suggests a growing willingness among better-performing firms to widen the mix of expertise they bring into the business. The shift mirrors a broader change in professional services, where firms are looking beyond technical compliance work towards services that rely on analysis, communication and client management.
Pricing model
The research also highlights differences in how firms charge for work. Top performers charge more than a third extra for payroll alone, pointing to stronger use of retainer and value-based pricing rather than billing only for time spent.
Price rises are also more common among stronger performers. According to the findings, those firms were more than twice as likely to be planning an increase of more than 20%.
Among practices already using value-based pricing, two in five said it had made their firm more profitable. That adds to the report’s broader argument that margins are shaped not only by software adoption but also by choices around service mix and commercial model.
Rachel Harris, Director of UK-based accountancy practice striveX, described how those operational changes have played out in her own business.
“Over the last five years, technology has powered my firm’s growth engine and been a huge contributor to why we’re now a multi-million pound business. Gaining access to AI is freeing my team up for higher-value work, now spending more time interpreting it for our clients. But it’s mapping client journeys, each piece of software and every process my team touches along the way which has proven to be our best diagnostic tool. Any margin gained from having our team well set up to know when and how to reach for different tools is reinvested in our client relationships,” said Harris.
Business & Technology
Network Rail will not reopen Botley Road early despite completion
Gas network company SGN confirmed it had repaired three minor gas leaks and left the site on Monday, August 3, six days earlier than expected.
The leaks were discovered during excavation works last month and contributed to the pushing back of the road’s reopening date, yet again, to September 20.
The completion of the gas mains replacement marked a significant step forward in the wider Oxford Station improvement project, which was originally budgeted at £161 million but is now expected to cost at least £237 million.
The development prompted hopes that Botley Road, closed beneath the rail bridge since April 2023, could reopen earlier than planned.
However, Network Rail has moved to manage expectations, saying the project remains on course to meet its existing target date rather than finish ahead of schedule.
A Network Rail spokesperson said: “We’re pleased that SGN has completed its gas mains replacement work.
“While this is an important milestone, it doesn’t necessarily mean the overall project will finish early as some remaining work is dependent on access to the railway, which we have had to rearrange to enable the replacement of the gas main.
“Our focus remains on meeting our planned deadline of 20 September for reopening Botley Road to traffic.”
While the completion of the gas works removes one of the most recent obstacles facing the scheme, Network Rail says further work under the bridge and around the station is still needed before the route can reopen to traffic.
Business & Technology
40-year-old Oxfordshire gymnastics club at risk of closure due to heat
The club is currently struggling in the summer heat, and has launched a new fundraiser to keep its gymnasts safe.
The club, which is based at Grove House Barn near Warkworth in Banbury, launched the fundraiser so it could buy and install four air conditioning units to keep its space cool.
Currently, the club hopes to raise £7,000 through the appeal so it can buy four 10kW air conditioning units and cover all the installation costs.
So far, the club has raised £380.
Karl Wade, director of Wade Gymnastics, said the club has become “increasingly warm” during the summer months due to the rising temperatures.
READ MORE: Thames Water leakage targets are ‘not realistic’ says boss after pay rise
Wade Gymnastics at Grove House Barn in Banbury (Image: Google Maps)
“Despite our best efforts to keep doorways and shutters open, it becomes very uncomfortable for gymnasts to play and train,” Mr Wade said.
He added: “The safety of our gymnasts and coaches is always our utmost priority.
“Unfortunately, the risk of having to close the business during these hot spells is increasing and we need to have more effective ways of keeping everyone cool.
“An air conditioning system would allow the business to stay open during those extreme hot conditions and continue to provide classes for everyone who attends.”
The gym currently delivers classes seven days a week for around 900 people, which range from toddlers to athletes competing at national level.
The gym club was founded more than four decades ago by Ruth Wade and, for the past 20 years it has been based at its current facility.
-
Business & Technology3 weeks agoHSBC UK & Visa test AI shopping with live payments
-
Business & Technology3 weeks agoValarian lands USD $50 million backing for sovereign AI
-
Business & Technology4 weeks agoMouser warns against viral hacks to cool overheating phones
-
Oxford News4 weeks agoNew romantasy bookshop attracts queues of customers
-
Business & Technology4 weeks agoSNP & Palantir launch AI tools for SAP transformations
-
Business & Technology4 weeks agoKane tops England influencer rankings after Mexico win
-
Traffic & Transport4 weeks ago‘I felt my spine and body split’: the woman who was hit by a child on a Lime bike – and denied compensation | Ebikes
-
Oxford News4 weeks agoDWP now checking bank accounts for Universal Credit and Pension Credit
