Loss of sensitive personal data.
Theft of an unencrypted laptop from the Data Controller’s home.
Undertaking issued to ensure that personal media devices used to store data are sufficiently encrypted.
Reason for action
Although it was concluded that the laptop was suitably secure physically, insufficient technical security measures were taken.
16 November 2011.