Loss of sensitive personal data.
An unencrypted laptop was stolen from a locked office.
Undertaking issued to ensure that all mobile data storage devices are sufficiently encrypted. All staff must be made aware of the data controller’s policy for the storage of personal data and be trained to follow it.
Reason for action
The personal data contained on the unencrypted laptop was downloaded onto it in breach of Council policy.
18 August 2009