Loss of personal data
37 staff members’ details were lost when the filing cabinet the information was stored in was sent to a recycling centre and crushed.
Undertaking issued to ensure that clear policies and procedures are in place to support staff who handle personal data and that these will be communicated to all relevant staff along with information governance training.
Reason for action
The data controller had established procedures, but did not have a specific written information handling policy in place and employees had not received formal data protection training.
6 August 2012