Loss of sensitive personal data.
Theft of two unencrypted laptops and back up media during a burglary of premises.
Undertaking issued to ensure that physical security measures are sufficient to prevent unauthorised access to persona data and that all portable media devices must be encrypted to a suitable standard.
Reason for action
While the laptops were kept in a locked cupboard and the backup media in a safe (which was stolen) the data controller was in the process of upgrading their security to include encryption, but the theft occurred before this could be put into practice.
06 December 2011.