Breach details
| What | A bag containing an encrypted portable media device and hard copy papers relating to planning application complaints. This included sensitive personal information relating to one of the complainant’s physical or mental health. |
| How much | 8 complaints. |
| When | Unknown. |
| Why | A bag containing sensitive personal information was stolen from one of Ombudsman’s investigators at a public house. There was a specific reason for the papers to be taken out of the office and a policy on security on information while in transport existed, but staff were unaware of the policies due to a lack of training. |
Regulatory action
| Regulator | ICO | Action | Undertaking to comply with the seventh data protection principle |
| When | 22 August 2013 |
| Details | The company shall provide mandatory annual training to all staff whose role includes the routine processing of personal information. The company shall also ensure that all staff are aware of its policies relating to personal information and are updated of any changes to these policies. |
Links
| View PDF of the Local Government Ombudsman (the LGO) Undertaking (Breach Watch Archive) |
| View PDF of the Local Government Ombudsman (the LGO) Undertaking (Via ICO Website) |