The violation happened in 2021. https://ico.org.uk/about-the-ico/media-centre/news-and-blogs...

I'm actually surprised the ICO can fine the UK government. This can't happen in France, for instance.