Feeds

Council loses USB of patient records

Worker 'had problems' using encrypted stick

Eight steps to building an HP BladeSystem

Cambridgeshire County Council has had its wrist slapped for losing an unencrypted memory stick containing the details of vulnerable adults.

The unencrypted memory stick contained the personal details of at least six individuals. The stick including case notes and minutes of meetings where staff discussed the care of the at-risk individuals.

The Council had previously gone to some lengths to get workers to only use encrypted storage for such sensitive information, including asking staff to hand in unencrypted discs and running internal campaigns to promote its newly established encryption policy.

Despite the council's warnings, an unnamed member of staff went back to using unencrypted USB sticks after having problems getting an encrypted stick to work properly.

This unscrambled stick subsequently went missing, obliging the council to report the loss of the sensitive data to privacy watchdogs at the ICO (Information Commissioner’s Office) last November, resulting in a mild rebuke from the ICO in its judgment on the case.

In a statement, Sally Anne-Poole, enforcement group manager at the ICO, commented: “While Cambridgeshire County Council clearly recognise the importance of encrypting devices in order to keep personal data secure, this case shows that organisations need to check their data protection policies are continually followed and fully understood by staff."

Council officials reaffirmed their commitment to the tightened data security policy and promised to carry out "regular and routine monitoring" of its encryption policy to make sure staff were following the approved procedures.

Chris McIntosh, chief exec of encryption supplier Stonewood, said that the case illustrated that user education sessions need to be applied whenever security policies are tightened up or else bad old habits will simply continue under a new regime.

He said: “What is clear is that in Cambridge County Council’s case, the loss wasn’t a failure on the part of security strategy, but rather one of employee education. An organisation can have the best security technology and protocols in the world, but without an educated workforce they’re worthless." ®

Maximizing your infrastructure through virtualization

More from The Register

next story
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
Airbus promises Wi-Fi – yay – and 3D movies (meh) in new A330
If the person in front reclines their seat, this could get interesting
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
Want to beat Verizon's slow Netflix? Get a VPN
Exec finds stream speed climbs when smuggled out
Samsung threatens to cut ties with supplier over child labour allegations
Vows to uphold 'zero tolerance' policy on underage workers
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.