Council loses children in care data
Stoke-on-Trent City Council loses a USB stick containing sensitive data of children in care.


The UK's data protection watchdog - the Information Commissioner's Office (ICO) - has taken action against Stoke-on-Trent City Council after the authority lost a USB stick containing sensitive information on 40 children in care.
A member of the public discovered the memory stick, which was unencrypted and not password protected, before returning it to the council.
The data included court reports and details of care proceedings.
Having breached the Data Protection Act, the local authority has been told to implement steps to ensure personal data stored by the body is adequately secured.
The council has agreed to encrypt portable and mobile devices used to store and transmit personal data, while staff education will be ramped up.
"When handling sensitive personal information, particularly information relating to the care of vulnerable children, it is important that authorities ensure the necessary measures are in place to protect this information," said Sally-Anne Poole, Enforcement Group Manager at the ICO.
Yet again, the ICO has not given out a fine for the breach.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"This incident occurred before 6 April so the powers now available to the information commissioner to issue penalties of up to 500,000 for serious breaches of the Data Protection Act, could not be considered," said Poole.
One of the central reasons why Google was not issued with a fine after the Street View Wi-Fi scandal was because the data was collected before the ICO's extra powers came into force.
An ICO spokesperson told IT PRO the council could "potentially" have been hit with a fine if the breach occurred after the penalty powers were granted.
The spokesperson also confirmed a fine would be handed to an as yet unnamed body or individual "in the near future," after information commissioner Christopher Graham indicated a penalty would be handed out before the end of the month.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
CyberOne appoints Microsoft’s Tracey Pretorius to its advisory board
News The threat intelligence leader will provide strategic guidance to CyberOne’s executive team
By Daniel Todd
-
CISA issues warning in wake of Oracle cloud credentials leak
News The security agency has published guidance for enterprises at risk
By Ross Kelly
-
UK regions invited to apply for ‘AI Growth Zone’ status
News The UK government has opened up bidding for regions hoping to secure 'AI growth zone' status.
By Emma Woollacott
-
“Botched government procurement” leads to £24 million Atos settlement
News Labour has accused the Conservative government of using taxpayers’ money to pay for their own mistakes
By Zach Marzouk
-
UK government to run Starlink trials in Snowdonia, Lake District
News The government has indicated low-Earth orbit satellites could be key to expanding connectivity to UK businesses
By Rory Bathgate
-
Government holds talks with data centre operators over energy blackout threat
News One data centre operator has been preparing to switch over to diesel power in the event of a national blackout
By Zach Marzouk
-
HPE inks $2 billion high-performance computing deal with the NSA
News HPE will provide scalable on-premises computing to the NSA using Greenlake
By Danny Bradbury
-
TikTok to open first European data centre in Ireland
News The move could signify a desire to shift its operations away from the US as well as secure its position in the European market
By Sabina Weston
-
MPs in a muddle over GDPR and storing voters' personal data
News Labour MP Chris Bryant says his staff were told to delete constituents' data
By Bobby Hellard
-
Broadband not meeting UK consumer expectations
News Survey finds many unhappy with broadband in the UK
By Ingrid Fadelli