What
Loss of sensitive personal data.
How much
10 records.
Why
An email containing sensitive information was sent to an unknown 3rd party and nine case files were temporarily lost during a move.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that staff are made aware that they may not send data to personal email accounts.
Reason for action
Information was emailed despite a policy being in place that stated this could only be done if sent to an equally secure recipient. A filing cabinet was not checked for case files during a move.
When
02 September 2011.
Links
View PDF of the Scottish Children’s Reporter Administration Undertaking (Via ICO Website)
View PDF of the Scottish Children’s Reporter Administration Undertaking (Breach Watch Archive)