Loss of sensitive personal data.
A bag belonging to a social worker employed in the Council’s Children and Young Peoples’ Department was stolen from a public house in London. The bag contained a hard copy file of papers concerning a child in the care of the council.
Undertaking issued to ensure that the data controller will draft and implement a formal policy covering the storage, physical security, transportation, use and disposal of personal data outside of the office environment. Compliance with this policy must be monitored.
Reason for action
The Information Commissioner concluded that an apparent lack of effective controls and procedures for taking information out of the office was a major contributor to the loss of highly personal data. It was also felt that further staff trained was needed.
01 March 2012.
View PDF of the London Borough of Croydon Undertaking (Via ICO Website)
View PDF of the London Borough of Croydon Undertaking (Breachwatch Archive)