The council did not protect data belonging to thousands of residents, the regulator says.

​The council did not protect data belonging to thousands of residents, the regulator says.