South Yorkshire Pensions Authority

Loss of personal data.

How much
9,140 records.

An unencrypted cd containing personal data relating to 9,140 pension scheme members was lost.


Regulatory action
Undertaking issued to ensure that all portable media devices used to store or transmit personal data are suitably encrypted. Staff must be made aware of and trained to follow the data controller’s policy for the storage, use, retention, or disposal of personal data.

Reason for action
The cd was being used as a working copy by administrative staff in the office environment and there was no indication it had been stolen. It had been created to provide staff easy access to data without full consideration of data security implications.

22 April 2010

View PDF of the South Yorkshire Pensions Authority Undertaking (Breach Watch Archive)