What
Loss of sensitive personal data.
How much
30 records.
Why
30 Membership forms were lost on a train.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that a document is created that clearly outlines all employees’ responsibilities in terms of the storage, transmission, use and disposal of personal data. All necessary amendments must be made by 31 January 2012
Reason for action
The organisation did not have a written policy in place for handling personal data outside of the office at the time of incident.
When
18 January 2012.
Links
View PDF of the Chartered Institute of Public Relations Undertaking (Via ICO Website)
View PDF of the Chartered Institute of Public Relations Undertaking (Breach Watch Archive)