recent work

Council signs formal undertaking for failure to comply with 3rd and 7th Data Protection Principles

Eastleigh Borough Council has been requested to sign an undertaking in order to ensure compliance with both the Third and Seventh Data Protection Principles.

Sensitive information was being held by the council, with said data sometimes being held in respect of criminal convictions and mental health status. Although the Information Commissioner’s Office (ICO) appreciates that organisations need to keep such types of data, it found shortcomings in the way the Council maintained and stored it; it also found that excessive information was stored for the purpose for which it was kept.

As a result of the undertaking Eastleigh Council will regularly reassess the list, and ensure the contents of the list are kept up to date.

Comment
Absolute Data is committed to ensuring companies and organisations, regardless of their size, create and follow realistic policies and procedures that are above the law. We can help your organisation create robust and effective data protection policies and procedures: we can spend some time getting to know what data-related activity your business partakes in, and ensure that your policies and procedures reflect this activity. We can also help to train your staff; not only in the importance of data protection, but how they can ensure they are fully adhering to data protection law. With the ICO’s power to fine up to £500,000 for data breaches, it is worth getting in touch with us to discuss how your organisation can ensure legal data compliance. Contact us now at info@absolute-data.co.uk, or call us on 01423 790125.