Loss of personal data.
An unencrypted compact disc containing the personal data of 3,383 customers passed on to the data controller by Carphone Warhouse was lost.
Undertaking issued to ensure that media devices used to transport and store personal data are encrypted and that any contracts between the data controller and any data processors require this.
Reason for action
The lost CD was unencrypted and the arrangement between the data controller and data processor was insufficient.
17 September 2008