Breach details
What | Loss of sensitive personal data. |
How much | “Several” records. |
When | 17 July 2011 |
Why | xxx. |
Regulatory action
Regulator | ICO | Action | Monetary penalty of £ 70,000 Undertaking issued to ensure that hard copy documentation contains the minimum amount of personal data necessary and is only taken out of the station when absolutely necessary. A written policy detailing these responsibilities must be produced and staff must be trained in these policies. |
When | 14 March 2012 |
Why the regulator acted
Breach of act | Report lost and printed in a newspaper. Inappropriate organisational and technical measures. |
Known or should have known | Policies in place marked such data as highly sensitive, but no policies were in place to cover security outside of the station. |
Likely to cause damage or distress | Report related to vulnerable children and sex crimes. |