Five councils breached the Data Protection Act by failing to keep people’s personal information secure, Information Commissioner, Christopher Graham, said today: Basingstoke and Deane Borough Council breached the Data Protection Act on four separate occasions during a two month period last year. The breaches included an incident in May when an individual was mistakenly sent…
Category: Lost or Missing
E*Trade Securities signs undertaking after loss of over 600 customers’ data
From the Information Commissioner’s Office: A financial services company with operations in the UK, USA and Middle East breached the Data Protection Act by losing over 600 customers’ personal details, the Information Commissioner’s Office (ICO) said today. E*Trade Securities Ltd discovered that a large number of customer files were missing in April 2010 when they…
UK: Memory stick with personal information about children goes missing
East Lothian Council has issued an unreserved apology after a security lapse in which an employee lost a memory stick which contained personal details of young children attending schools in the Dunbar area. The council has informed parents of primary school children in Dunbar and district that a copy of electronic records it holds containing…
Regions says employee 401k data lost when auditor Ernst & Young mailed flash drive and code key together
Russell Hubbard reports: Personal information about Regions Financial Corp. current and former employees was lost in November when a flash drive with the data came up missing after being mailed by outside auditor Ernst & Young in the same envelope as the decryption code. Read more on al.com.
Follow-up: Chartered Institute of Public Relations signs undertaking after membership applications lost on train
As a follow-up to a breach reported previously on this blog, the Chartered Institute of Public Relations has signed an undertaking with the Information Commissioner’s Office. From the undertaking: In May 2011, the Information Commissioner (the “Commissioner”) became aware of an incident involving the loss of up to 30 CIPR membership application forms. A member…
Ca: Edmonton public schools blasted over memory stick loss
CBC News reports: Edmonton Public School District did not follow its own policy in the loss of memory stick containing personal information of more than 7,500 employees, says the Alberta privacy commissioner. An investigation by the Office of the Information and Privacy Commissioner found information on the USB memory stick was no protected by a…