Loss of personal data.
An unencrypted USB memory stick containing the personal data of children looked after the data controller was lost.
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
The memory stick was not encrypted or password protected.
9 July 2009
View PDF of the Neath Port Talbot County Borough Council Undertaking (Breach Watch Archive)