FOI Request - Lost Data
In accordance with the Freedom of Information Act, I would be grateful if you could comply with the following request:
•1. Please provide details of the number of cases where personal data pertaining to the public or employees was (a) lost or (b) breached by other means in each year since 2011-12. Please provide a breakdown by (a) data type, (b) the circumstances of the breach, (c) the number of people’s records affected and how many of these were children or vulnerable people, (d) whether the breach was reported to the Information Commissioner’s Office, and (e) any action taken against members of staff.
•2. Please provide details of the number of (a) laptops, portable computers and tablets, (b) memory sticks and (c) mobile devices (d) hard copies of confidential or sensitive documents that have been (i) lost or (ii) stolen in each year since 2011-12, broken down by whether they were encrypted or unencrypted.
|Date||ICO notified||Details of breach||Affected|
|Jun 2012||Yes||teacher inappropriately disclosed pupil's personal data||1 child|
|Jul 2013||Yes||Papers left in café following meeting||21 children|
|Aug 2013||No||Publication of documents on Council website|
wrong email address used to convey client information
|April 2015||Yes||Letter sent to wrong recipient||
|May 2015||No||Details of child with same name inadvertently released to parent/guardian||1 child|
As a result of the breach in Jul 2013, training was provided for all staff and an online resource was developed, and, as a result of the breach in May 2015, further training was delivered to all staff.
Response from Education and Social Care:
2011-12 none of the items listed above were lost or stolen
2012-13 none of the items listed above were lost or stolen
2013-14 confidential paper documents were "lost" (left in café). By their nature, these were unencrypted. No other items listed were lost or stolen.
2014-15 none of the items listed above were lost or stolen.
Response from ICT:
|Reported Lost or Stolen|
|a) Laptops, portable computers, tablets||1||0||0||2||0|
|b) Memory Sticks||0||0||0||0||0|
|c) Mobile Devices||0||0||0||0||0|
|d) Hard copies of confidential / sensitive information||-||-||-||-||-|
a) Laptop stolen in 2011/12 was unencrypted but had no personal, confidential or sensitive information stored on it. One of the laptops stolen in 2014/15 was unencrypted but had no personal, confidential or sensitive information stored on it; the other laptop that was stolen was encrypted.
b) Nothing reported
c) Standard mobile phone with no data package, reported lost or stolen. Not encrypted but protected by a PIN.
d) See response to question 1