An unencrypted and non-password protected memory stick containing sensitive personal data was handing in to a newspaper.
Undertaking issued to ensure that any board issued portable media devices are sufficiently encrypted and that sufficient physical security measures are taken.
Reason for action
It was unclear how the memory stick ended up in the possession of the Newspaper, but it was unencrypted and not password protected.
30 September 2010
View PDF of the Forth Valley NHS Board Undertaking (Via ICO Website)
View PDF of the Forth Valley NHS Board Undertaking (Breach Watch Archive)