What
Loss of sensitive personal data.

How much
About 33 records.

Why
An unencrypted laptop was stolen from the Audiology Department. Three other encrypted laptops belonging to the data controller had also been stolen a month prior.

Regulator
ICO

Regulatory action
Undertaking issued to ensure that within six months any personal data held on a laptop computer or any other removable media by the data controller is identified and encrypted.

Reason for action

Sensitive data was transferred to the memory stick in breach of Council procedure and was not password protected. The employee intended to use the data to work at home, but lost it during his commute.

When
16 October 2009

Links
View PDF of the Maidstone and Tunbridge Wells NHS Trust Undertaking (Breach Watch Archive)