IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

ICO hits London council with £70,000 data breach fine

The London Borough of Barnet feels watchdog's wrath after losing children's data.

Data loss folder

A London council has been hit with a 70,000 fine from the Information Commissioner's Office (ICO) following the loss of sensitive information about 15 local youngsters.

The names, addresses and sexual histories of 15 children and young people living in the London Borough of Barnet were stolen from a council worker's house during a burglary last April.

The potential for damage and distress in this case is obvious.

The thieves stole an encrypted computer and a laptop bag carrying paper records, which contained the youngsters' data.

The breach is the second time in two years the council has found itself at the centre of a data loss incident, after an unencrypted device containing personal information was stolen from another employee's home.

Following an investigation by the ICO into the latest breach, it was concluded that the council had not taken sufficient action to guard against the accidental loss of paper-based records.

In a statement the ICO said: "The council had an information security policy and some guidance for staff on handling sensitive papers, [but] the measures failed to explain how the information should be kept secure."

Simon Entwisle, director of operations at the ICO, said, following the council's earlier data breach, it was a shame that it hadn't taken more care with its residents' data.

"Barnet Council has taken action to keep the personal data they use secure, [but] it is vitally important that organisations have the correct guidance in place to keep sensitive paper records taken outside of the office safe," said Entwisle.

"This includes storing papers containing sensitive information separately from laptops."

In a statement to IT Pro, Barnet Council said it was disappointed by the ICO's decision to issue a fine.

"This data loss was the result of a criminal act where a member of staff had their house broken into and material that was under lock and key stolen," said the statement.

"The ICO also accepts that it was appropriate for the member of staff to have this material at home for this period [and] there is no evidence the material taken was misused in anyway."

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Recommended

ICO crackdown on AI recruitment part of three-year vision to save businesses £100 million
data protection

ICO crackdown on AI recruitment part of three-year vision to save businesses £100 million

14 Jul 2022
The public sector will no longer face eye-watering data breach fines, ICO confirms
public sector

The public sector will no longer face eye-watering data breach fines, ICO confirms

1 Jul 2022
MoJ faces £17.5m GDPR fine over subject access request backlog
data protection

MoJ faces £17.5m GDPR fine over subject access request backlog

20 Jan 2022
Cabinet Office fined £500,000 for New Year Honours data leak
data breaches

Cabinet Office fined £500,000 for New Year Honours data leak

3 Dec 2021

Most Popular

Cyber attack on software supplier causes "major outage" across the NHS
cyber attacks

Cyber attack on software supplier causes "major outage" across the NHS

8 Aug 2022
Why convenience is the biggest threat to your security
Sponsored

Why convenience is the biggest threat to your security

8 Aug 2022
Electrical explosion reported at Google's Iowa data centre
data centres

Electrical explosion reported at Google's Iowa data centre

9 Aug 2022