Feeds

ICO acts on student privacy breach

Slapped wrist for Manchester Uni

Internet Security Threat Report 2014

Manchester University has been censured by the Information Commissioner's Office for publishing personal information about students.

The ICO said it had taken enforcement action against the university for a breach of the Data Protection Act after a member of staff emailed an attachment to 469 students which contained the personal records of 1,700 people.

The records, which included information on some students' disabilities, were published when a member of the university staff had unauthorised access to the information.

The university has now signed a formal undertaking outlining that it will process personal information in line with the Data Protection Act. It said that it will ensure all its staff have adequate training to prevent the inappropriate transfer of data and that it will take measures to safeguard personal data from accidental loss or destruction.

Mick Gorrill, assistant information commissioner at the ICO, said: "The Data Protection Act clearly states that organisations, including universities, must take appropriate measures to ensure that personal information is kept secure.

"This case reinforces the importance that only those authorised should have access to sensitive personal information such as a student's disabilities and other health details. Despite the absence of a justifiable reason, the staff member was able to access the information and send it to students and peers which could cause significant distress to individuals concerned.

"Under the Data Protection Act, organisations must ensure that their policies on the transfer, sharing and publication of personal information are adequate and that staff members are aware and understand those policies. Manchester University recognises the seriousness of this case and has agreed to take immediate remedial action."

This article was originally published at Kable.

Kable's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Choosing a cloud hosting partner with confidence

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
DOUBLE BONK: Testy fanbois catch Apple Pay picking pockets
Users wail as tapcash transactions are duplicated
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
In the next four weeks, 100 people will decide the future of the web
While America tucks into Thanksgiving turkey, the world will be taking over the net
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.