Loss of personal data on two occasions.
325 and 16 records.
On two separate occasions password protected, but unencrypted laptops were lost. One was left on a bus and the second was reported missing by an employee while boarding a plane in a Spanish airport.
Undertaking issued to ensure that all portable media devices containing personal data are sufficiently encrypted.
Reason for action
Whilst neither laptop has been recovered to date they did not contain any sensitive personal data. Since the incident occurred the data controller has ensured the encryption of mobile devices that contain personal data and provided all employees with data protection training.
10 February 2012.