The British Council has copped a serve and been found in breach of the Data Protection Act by the UK's Information Commissioner’s Office after the Council lost a CD containing a trade union membership list. Courier company TNT misplaced the disk, and the Council initially claimed the CD was encrypted, however this has turned out not to be the case. The data included bank details on 2,000 union members.
In its response, the ICO has necessitated British Council to pen a formal agreement to improve its data handling measures, involving immediate encryption of all the mobile and handheld devices that are used to store personal information.
Comments