Confidential and personal details were sent to the wrong people by staff at Companies House in Cardiff, BBC Wales has learned.
A Freedom of Information request revealed 13 breaches of data protection law at the agency’s headquarters in 2014.
A director’s home address was revealed on the public register following a “mix-up” of documents being scanned.