Loss of personal data.
Loss of an unencrypted memory stick that was posted by recorded delivery.
Undertaking issued to ensure that any portable media devices used to store data are sufficiently encrypted and that physical security measures are put in place to prevent unauthorised access to physical data, particularly in respect to the unauthorised use of memory sticks.
Reason for action
A practical database was downloaded, without authorisation onto an unencrypted and non password protected memory stick
26 May 2010
View PDF of the Lampeter Medical Practice Undertaking (Via ICO Website)
View PDF of the Lampeter Medical Practice Undertaking (Breach Watch Archive)