Intellectual Property Law

Laptop theft leads ICO to declare Skipton in breach of the DPA

Looking at the latest ICO press releases, we see that last month the ICO found Skipton Financial Services to be in breach of the Data Protection Act. This arose out of the theft from a Skipton contractor of a laptop containing the unencrypted personal data on 14,000 Skipton customers. The reason for the finding was that the data was not encrypted.

Skipton has signed an undertaking that it will ensure the secure of personal data, to encrypt 'sensitive' data held on laptops, and to perform risk assessments where contractors are processing personal data for the company.

Full post as published by IMPACT on March 26, 2008 (boomark / email).