The Information Commissioner's Office (ICO) has found the British Council in breach of the Data Protection Act after the loss of an unencrypted computer disc

Details lost include sensitive personal information relating to trade union membership of over 2,000 members of staff.

In response, the ICO has required the orgnisation to sign a formal undertaking of reasonable measures to keep personal information secure in future. These include ensuring that all portable and mobile devices which are used to store and transmit personal information must be encrypted, with immediate effect.

The Undertaking has been signed on behalf of the British Council by the chief executive, Martin Davidson.

Mick Gorrill, assistant information commissioner at the ICO, said: "The British Council proactively reported the breach to the ICO and took immediate remedial action which demonstrates its understanding of the seriousness of this data loss. The Data Protection Act clearly states that organisations must take appropriate measures to ensure that personal information is kept secure.

"The organisation also agrees to ensure that its policies on the transfer and sharing of personal information on portable devices are clear and compliant with government standards."

Failure to meet the terms of the undertaking would lead to further enforcement action by the ICO.

This article was originally published at Kablenet.

Kablenet's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Related stories

• Web host lunches clients' emails for a week (6 November 2009)
• Insurance giant rapped on knuckles over DPA breach (10 June 2009)
• ICO voices concern over creaking data protection law (13 May 2009)
• ICO acts on student privacy breach (30 April 2009)
• Budget 09 Darling banks on offshoring to save UK plc (22 April 2009)
• Coroners & Justice Bill chewed a new one by opposition (16 March 2009)
• UK's privacy watchdog not very bitey (12 March 2009)
• Data Protection Act 'is not enforced' (5 March 2009)
• 'Ich bin ein storyteller', says UK taxman (2 March 2009)