|Loss of sensitive personal data.
|17 July 2011
|Monetary penalty of £ 70,000
Undertaking issued to ensure that hard copy documentation contains the minimum amount of personal data necessary and is only taken out of the station when absolutely necessary. A written policy detailing these responsibilities must be produced and staff must be trained in these policies.
|14 March 2012
Why the regulator acted
|Breach of act
|Report lost and printed in a newspaper. Inappropriate organisational and technical measures.
|Known or should have known
|Policies in place marked such data as highly sensitive, but no policies were in place to cover security outside of the station.
|Likely to cause damage or distress
|Report related to vulnerable children and sex crimes.