Loss of sensitive personal data
Undertaking issued to ensure that portable media devices are suitably encrypted
Reason for action
The stolen laptop was unencrypted and investigation revealed that the data controller’s policies and procedures did not fully comply with the Act’s requirements.
27 May 2011.