ICO says more than 9000 children's details put at risk by UK councils

[security curmudgeon <jericho () attrition org>]

http://www.infosecurity-magazine.com/view/10852/ico-says-more-than-9000-childrens-details-put-at-risk-by-uk-councils/

ICO says more than 9000 children's details put at risk by UK councils
09 July 2010

  The Information Commissioner' Office (ICO) has taken action against the 
London Borough of Barnet, West Sussex County Council and Buckinghamshire 
County Council for breaching the Data Protection Act.

According to the ICO, a systemic lack of staff training on how to handle 
personal information has led to the loss of sensitive personal information 
relating to thousands of children.

Sally-Anne Poole, the ICO's enforcement group manager, said that the three 
councils have shown a poor regard for the importance of protecting 
children's personal information.

It is, she said, essential that councils ensure the correct preventative 
safeguards are in place when storing and transferring personal 
information, especially when it concerns sensitive information relating to 
children.

"A lack of awareness and training in data protection requirements can lead 
to personal information falling into the wrong hands", she said.

The ICO says that theft from the home of an employee of the London Borough 
of Barnet was reported by the council. An unencrypted, non-password 
protected USB stick and CDs containing the sensitive personal information 
of over 9,000 children and members of their families were taken.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php