Loss of personal data.
An unencrypted laptop containg payroll data was stolen from the home of an employee of the data controller
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
The laptop was unencrypted, although the data controller has begun steps to introduce a policy to address this issue.
7 August 2009
View PDF of the UPS Limited Undertaking (Breach Watch Archive)