Monthly Archives: May 2007

Orange Personal Communications Services Limited

Posted on by

What
Loss of personal data

How much
A number of records.

Why
Members of staff who had recently commenced working for the company were allowed to share user names and passwords to access company computer systems holding the personal data of Orange customers.

Regulator
ICO

Regulatory action
Undertaking issued to ensure that the sharing of user names and passwords by Customer Service Representatives, to access computer systems, shall not be allowed under any circumstances.

Reason for action
The ICO had received a complaint about the sharing of user names and passwords by Customer Service Representatives.

When
23 May 2007

Links
View PDF of the Orange Personal Communications Services Limited Undertaking (Breach Watch Archive)

Littlewoods Shop Direct Home Shopping Limited

Posted on by

What
Inappropriate processing of personal data.

How much
Unknown.

Why
The ICO received a complaint from a customer of the data controller who complained that they continued processing her personal data for the purpose of direct marketing despite a written notice to the contrary.

Regulator
ICO

Regulatory action
Undertaking issued to ensure that the personal details of the data subject are suppressed from all company databases to ensure that she will not receive any further marketing material from the data controller. The data controller must also review procedures currently in place to ensure that customers rights under Section 11 of the Act are upheld.

Reason for action
The data controller was continuing to the process the subject’s data, in violation of her rights.

When
21 May 2007

Links
View PDF of the Littlewoods Shop Direct Home Shopping Limited Undertaking (Breach Watch Archive)

Phones 4U Ltd

Posted on by

What
Loss of personal data

How much
A number of records.

Why
Items of personal information were recovered from a refuse bin outside the Phones 4U premises in Market Way, Coventry, and Regent Street, Swindon. The information included documentation showing customer names and addresses, and bank account details.

Regulator
ICO

Regulatory action
Undertaking issued to ensure that all paper waste generated is to be treated as confidential and shredded. Adequate and relevant data protection training must be given to all staff.

Reason for action
The ICO had received a complaint about the data controller’s breach of the Seventh Data Protection Principle.

When
17 May 2007

Links
View PDF of the Phones 4U Ltd Undertaking (Breach Watch Archive)