My Girlfriend changed jobs recently, and as such had to provide the local council with a copy of her employment contract to support claims for low-income support benefits.
Now, it seems they have lost it.
This is a document provided in confidence to an official department, which contains details including home address, workplace/working hours, full name, DoB, etcetera.
I'm fairly sure that this is the sort of information which could be used to steal her identity.
Another concern is that someone could essentially track her movements, plan to break into the house, anything. She has had problems with stalkers in the past.
Would this constitute a break of the data protection act? (We are UK-based)