Maidstone and Tunbridge Wells NHS Trust

Loss of sensitive personal data.

How much
About 33 records.

An unencrypted laptop was stolen from the Audiology Department. Three other encrypted laptops belonging to the data controller had also been stolen a month prior.


Regulatory action
Undertaking issued to ensure that within six months any personal data held on a laptop computer or any other removable media by the data controller is identified and encrypted.

Reason for action

Sensitive data was transferred to the memory stick in breach of Council procedure and was not password protected. The employee intended to use the data to work at home, but lost it during his commute.

16 October 2009

View PDF of the Maidstone and Tunbridge Wells NHS Trust Undertaking (Breach Watch Archive)