Loss of personal data
Items of personal data were recovered from refuse bins outside branches in Fareham, Manchester, Nottingham and Glasgow, including documents relating to individual accounts and application forms, a private banking form and a photocopy of a customer’s provisional driving license.
Undertaking issued to ensure that all data protection procedures are updated and strictly adhered to, especially relating to the disposal of confidential waste. Appropriate data protection training must be given to all relevant staff.
Reason for action
The ICO had received complaints about the data controller’s breach of the Seventh Data Protection Principle.
23 February 2007
View PDF of the Royal Bank of Scotland plc Undertaking (Breach Watch Archive)