recent work

Theft of briefcase results in Data Protection Act (DPA) breach

The ICO confirmed the DPA breach after verifying that sensitive personal data was stolen along with a briefcase from a Leicestershire County Council social worker’s home.

The briefcase, which was stolen in a burglary in May 2011, contained the sensitive personal data of 18 individuals, outlining ‘details of neglect and requested the removal of the children from their parents’ care’.

Although the line manager, that authorised the social worker to take the files home, had been trained in data protection policies and procuedures, the social worker had not.

The authority had a policy in place but this didn’t relate to the handling of paper documents while working from home.

Stephen Eckersley, the ICO’s Head of Enforcement said:

“Local authorities must recognise that social workers are handling some of the most sensitive information available. The fact that this information often relates to vulnerable young children means it is all the more important for these organisations to provide staff with adequate training and guidance on how to keep this information secure.

“While Leicestershire County Council already recognised the risks associated with home working and had produced guidance for their staff, the guidance did not explain how papers containing personal information should be kept secure.

“We are pleased that the Council have now committed to taking action to protect the personal information they handle and will extend its training programme to cover all staff who are regularly required to take this information outside of the office.”

Comment
DataWise by Absolute Data, is committed to ensuring companies and organisations, regardless of their size, create and follow realistic policies and procedures that are above the law. We can help your organisation create robust and effective data protection policies and procedures: we can spend some time getting to know what data-related activity your business partakes in, and ensure that your policies and procedures reflect this activity. We can also help to train your staff; not only in the importance of data protection, but how they can ensure they are fully adhering to data protection law. DataWise, one of our services, provides clients with a data protection toolkit, which offers a robust and effective solution in reducing the risk of data breaches. With the ICO’s power to fine up to £500,000 for data breaches, it is worth getting in touch with us to discuss how your organisation can ensure legal data compliance. Contact us now at info@absolute-data.co.uk, or call us on 01423 790125.