Loss of sensitive personal data.
A backup tape and supporting device containing details of pupils, parents and guardians was lost.
Undertaking issued to ensure that in the future all personal data is encrypted to a sufficient standard and that current operational procedures are reviewed and revised.
Reason for action
While the backup tape did not appear to have been stolen, it could not be located. The data controller contacted all parents and guardians effected by the incident to advise them accordingly. However although the data on the device was recovered in full, the Commissioner’s investigation revealed that the technical measures employed by the school were inadequate.
16 November 2011.
View PDF of the Phoenix Nursery School Undertaking (Via ICO Website)
View PDF of the Phoenix Nursery School Undertaking (Breach Watch Archive)