Sandwell Metropolitan Borough Council

Loss of sensitive personal data.

How much
About four records.

An unencrypted memory stick containing data relating to children in care was lost.


Regulatory action
Undertaking issued to ensure that all portable media devices are encrypted to a suitable standard. Staff must be made aware of the data controller’s policy for the storage and use of personal data and be appropriately trained to follow that policy.

Reason for action
Sensitive data was transferred to the memory stick in breach of Council procedure and was not password protected. The employee intended to use the data to work at home, but lost it during his commute.

29 July 2009

View PDF of the Sandwell Metropolitan Borough Council Undertaking (Breach Watch Archive)