What
Loss of personal data.
How much
148 records.
Why
Failure to close a test area on the University’s website that contained student records.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that university IT staff ensure the appropriate security of all data following maintenance.
Reason for action
Insufficient managerial control was in place to ensure that the test version of the database was deleted.
When
20 July 2011.
Links
View PDF of the University of York Undertaking (Via ICO Website)
View PDF of the University of York Undertaking (Breach Watch)