Loss of sensitive personal data.
Two unencrypted laptops were stolen from a locked office on the data controller’s premises.
Undertaking issued to ensure that appropriate security measures are in place to ensure that laptops are safely stored and encrypted.
Reason for action
The laptops were not encrypted and no additional physical security measures were in place beyond being placed in a locked office.
2 June 2009