Loss of sensitive personal data.
30 Membership forms were lost on a train.
Undertaking issued to ensure that a document is created that clearly outlines all employees’ responsibilities in terms of the storage, transmission, use and disposal of personal data. All necessary amendments must be made by 31 January 2012
Reason for action
The organisation did not have a written policy in place for handling personal data outside of the office at the time of incident.
18 January 2012.