Feeds

Home Office promises better personal data guards

ICO orders tightening of loose lips

Next gen security for virtualised datacentres

The Home Office has promised privacy regulator the Information Commissioner's Office (ICO) that it will handle citizens' personal data securely in the future, after the ICO found it in breach of the Data Protection Act.

A contractor to the Home Office, PA Consulting, lost an unencrypted memory stick containing the sensitive personal information of thousands of people last year. The ICO has now made the Home Office sign a formal undertaking to protect citizens' data.

The Home Office has promised that all mobile or portable machines which carry personal data will be encrypted from now on, and that any contractor will also use encryption.

“The Data Protection Act clearly states that organisations must take appropriate measures to ensure that personal information is kept secure," said Assistant Commissioner Mick Gorrill. "The Home Office recognises the seriousness of this data loss and has agreed to take immediate remedial action. It has also agreed to conduct future audits to ensure compliance with the Act.”

The undertaking commits the Home Office to ensuring that anyone processing personal data for it will comply to the same standards as it, and that it will perform regular audits to ensure that that is the case.

"This case was serious because it involved thousands of individual records, which contained sensitive information on people serving custodial sentences and others previously convicted of criminal offences," said Gorrill. "This breach illustrates that even though a contractor lost the data, it is the data controller (the Home Office) which is responsible for the security of the information. It is vital that sensitive personal information is handled properly and held securely at all times."

The ICO could have issued an enforcement notice against the Home Office, a breach of which would be a criminal offence carrying a fine of up to £5,000. The Home Office agreed to the undertaking "in consideration of the Commissioner not exercising his powers to serve an enforcement notice," the undertaking said.

The ICO has also taken similar action against Abertawe Bro Morgannwg University NHS Trust and Tees, Esk and Wear Valleys NHS Foundation Trust.

An unencrypted laptop containing sensitive information on 5,000 people was lost by Abertawe Bro Morgannwg University NHS Trust while Tees, Esk and Wear Valleys NHS Foundation Trust lost an unencrypted memory stick containing details on patients and staff.

The two organisations also signed undertakings promising to protect personal information in their care.

Copyright © 2008, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

Next gen security for virtualised datacentres

More from The Register

next story
Britain's housing crisis: What are we going to do about it?
Rent control: Better than bombs at destroying housing
'Stop dissing Google or quit': OK, I quit, says Code Club co-founder
And now a message from our sponsors: 'STFU or else'
Top beak: UK privacy law may be reconsidered because of social media
Rise of Twitter etc creates 'enormous challenges'
Ex US cybersecurity czar guilty in child sex abuse website case
Health and Human Services IT security chief headed online to share vile images
Uber, Lyft and cutting corners: The true face of the Sharing Economy
Casual labour and tired ideas = not really web-tastic
We need less U.S. in our WWW – Euro digital chief Steelie Neelie
EC moves to shift status quo at Internet Governance Forum
Oz biz regulator discovers shared servers in EPIC FACEPALM
'Not aware' that one IP can hold more than one Website
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?