What
Loss of personal data.
How much
26,000 records.
Why
An unencrypted laptop was stolen from the data controller’s premises.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. The physical security of such devices must be ensured.
Reason for action
The laptop was password protected, but not encrypted.
When
10 July 2009
Links
View PDF of the London Clubs International Limited Undertaking (Breach Watch Archive)
What
Loss sensitive of personal data.
How much
84 records.
Why
A filing cabinet containing paper records referring to the personal details of 84 individuals undergoing Drug Rehabilitation Requirements was lost during an office move.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that the physical security of personal data be ensured, especially during transit. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
A building contractor was employed to transport a number of cabinets to the new sit and insufficient organisational measures were made to prevent cabinets containing data for transfer from being mixed with obsolete cabinets to be disposed of.
When
9 July 2009
Links
View PDF of the Counted4 CIC Undertaking (Breach Watch Archive)
What
Loss of personal data.
How much
65 records.
Why
An unencrypted USB memory stick containing the personal data of children looked after the data controller was lost.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
The memory stick was not encrypted or password protected.
When
9 July 2009
Links
View PDF of the Neath Port Talbot County Borough Council Undertaking (Breach Watch Archive)
What
Loss of sensitive personal data.
How much
220 records.
Why
13 unencrypted laptops were stolen during a burglary at secure council offices, with the exception of one stolen from a staff members car and another that was stolen during the course of a youth activity evening.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
Three of these unencrypted laptops held sensitive personal data and the council did not take adequate steps to safeguard the data, either through encryption, or better physical security in respect of the two laptops stolen outside of council property.
When
7 July 2009
Links
View PDF of the Oldham Council Undertaking (Breach Watch Archive)