What
Loss of sensitive personal data.
How much
Unknown.
Why
A backup tape and supporting device containing details of pupils, parents and guardians was lost.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that in the future all personal data is encrypted to a sufficient standard and that current operational procedures are reviewed and revised.
Reason for action
While the backup tape did not appear to have been stolen, it could not be located. The data controller contacted all parents and guardians effected by the incident to advise them accordingly. However although the data on the device was recovered in full, the Commissioner’s investigation revealed that the technical measures employed by the school were inadequate.
When
16 November 2011.
Links
View PDF of the Phoenix Nursery School Undertaking (Via ICO Website)
View PDF of the Phoenix Nursery School Undertaking (Breach Watch Archive)