IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Education bodies caught in data breach gaffes

Two laptops are stolen with plenty of unprotected data disappearing with them.

Sensitive data

Two educational institutions have been caught breaking the Data Protection Act after failing to protect laptops that were later stolen.

In the case of the Association of School and College Leaders (ASCL) a laptop containing sensitive personal data was stolen from an employee's home in Yorkshire.

Whilst the laptop itself was encrypted, certain files were not, meaning data relating to around 100 individuals was not protected. In some cases, details of people's physical or mental health were easily accessible to whoever stole the laptop.

Holly Park School in Barnet had an unencrypted laptop stolen from an unlocked office. Lost data included pupils' names, addresses, exam marks and information relating to their health.

This type of breach is inexcusable and is putting people's personal information at risk unnecessarily.

On carrying out an investigation, the Information Commissioner's Office (ICO) discovered the school did not have a data protection policy in place.

"The ICO's guidance is clear: all personal information the loss of which is liable to cause individuals damage and distress - must be encrypted," said Sally Anne Poole, the watchdog's acting head of enforcement.

"This is one of the most basic security measures and is not expensive to put in place - yet we continue to see incidents being reported to us. This type of breach is inexcusable and is putting people's personal information at risk unnecessarily."

As is typical with ICO investigations, both organisations have agreed to improve their data protection practices. No fines were handed out.

The ICO has not issued a fine since June, when it hit Surrey County Council with a 120,000 fine.

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

MoJ faces £17.5m GDPR fine over subject access request backlog
data protection

MoJ faces £17.5m GDPR fine over subject access request backlog

20 Jan 2022
Cabinet Office fined £500,000 for New Year Honours data leak
data breaches

Cabinet Office fined £500,000 for New Year Honours data leak

3 Dec 2021
ICO publishes new data protection standards for the adtech industry
data protection

ICO publishes new data protection standards for the adtech industry

25 Nov 2021
Celebrity data leaked after ransomware attack on London's Graff jewellers
ransomware

Celebrity data leaked after ransomware attack on London's Graff jewellers

1 Nov 2021

Most Popular

FCC commissioner urges Apple and Google to remove TikTok from app stores
data protection

FCC commissioner urges Apple and Google to remove TikTok from app stores

29 Jun 2022
Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022
Internet providers look to ease cost of living crisis with cheaper broadband
broadband

Internet providers look to ease cost of living crisis with cheaper broadband

29 Jun 2022