Possible loss of sensitive personal information.
Discovery that some hard copy files relating to cases could not be accounted for.
Undertaking issued to ensure that all correspondence regarding personal data is adequately protected and a permanent system for the logging of data is put into place.
Reason for action
It was impossible, due to insufficient data tracking, to be sure if the data had ever been received by the data controller, let alone lost.
15 April 2011.
View PDF of the Council for Healthcare Regulatory Excellence Undertaking (Via ICO Website)
View PDF of the Council for Healthcare Regulatory Excellence Undertaking (Breach Watch Archive)