Loss of personal data.
An unencrypted laptop was stolen from the data controller’s premises.
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. The physical security of such devices must be ensured.
Reason for action
The laptop was password protected, but not encrypted.
10 July 2009