Loss of personal data.
Failure to close a test area on the University’s website that contained student records.
Undertaking issued to ensure that university IT staff ensure the appropriate security of all data following maintenance.
Reason for action
Insufficient managerial control was in place to ensure that the test version of the database was deleted.
20 July 2011.
View PDF of the University of York Undertaking (Via ICO Website)
View PDF of the University of York Undertaking (Breach Watch)