Two educational institutions have been caught breaking the Data Protection Act after failing to protect laptops that were later stolen.
In the case of the Association of School and College Leaders (ASCL) a laptop containing sensitive personal data was stolen from an employee's home in Yorkshire.
Whilst the laptop itself was encrypted, certain files were not, meaning data relating to around 100 individuals was not protected. In some cases, details of people's physical or mental health were easily accessible to whoever stole the laptop.
Holly Park School in Barnet had an unencrypted laptop stolen from an unlocked office. Lost data included pupils' names, addresses, exam marks and information relating to their health.
This type of breach is inexcusable and is putting people's personal information at risk unnecessarily.
On carrying out an investigation, the Information Commissioner's Office (ICO) discovered the school did not have a data protection policy in place.
"The ICO's guidance is clear: all personal information the loss of which is liable to cause individuals damage and distress - must be encrypted," said Sally Anne Poole, the watchdog's acting head of enforcement.
"This is one of the most basic security measures and is not expensive to put in place - yet we continue to see incidents being reported to us. This type of breach is inexcusable and is putting people's personal information at risk unnecessarily."
As is typical with ICO investigations, both organisations have agreed to improve their data protection practices. No fines were handed out.
The ICO has not issued a fine since June, when it hit Surrey County Council with a 120,000 fine.
-
Cleo attack victim list grows as Hertz confirms customer data stolenNews Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
-
Lateral moves in tech: Why leaders should support employee mobilityIn-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
-
TikTok to open first European data centre in IrelandNews The move could signify a desire to shift its operations away from the US as well as secure its position in the European market
-
MPs in a muddle over GDPR and storing voters' personal dataNews Labour MP Chris Bryant says his staff were told to delete constituents' data
-
Trump resort will not be charged for breaching data lawsNews Presidential hopeful's Scottish golf course failed to register under the Data Protection Act for four years
-
Banks urged to share data but warned over securityNews Experts voice concern over security of open API recommendations
-
EU centralises European open data through one portalNews Open Data Portal will enable public sector bodies to share information
-
Experts question sheer scale of data storage required by Snooper's CharterNews Who will foot bill for physical infrastructure to house UK's browsing histories?
-
Snapchat's T&Cs update could put user data at riskNews Kaspersky said giving the service permission to share pictures with third parties could lead to a serious breach of privacy
-
Transport Systems Catapult launches data sources catalogueNews Intelligent Mobility Data Index could push forward smart transport innovation in the UK
