Portsmouth council avoids fine after thieves steal laptop from worker's car
and live on Freeview channel 276
The Information Commissioner's Office (ICO) has now ruled no further action was needed over the November incident.
Stored on the laptop and in the files were personal details about six service users, two of them children, and information about their schools, family and health. The items were taken from the Portsmouth City Council officer's car.
Advertisement
Hide AdAdvertisement
Hide AdIf found to be a serious breach of general data protection regulation (GDPR) the ICO is able to fine local authorities up to 20m Euros or four per cent of the council's annual turnover.
But an ICO spokeswoman said: ‘Portsmouth City Council made us aware of an incident. After looking at the details, we provided the council with detailed advice and concluded no further action was necessary.’
A council spokesman added: 'We always strive to meet the highest standards when collecting and using personal information, in accordance with data protection law.
'We have robust security measures, including encrypting personal data and equipment, system access controls and regular training in data protection for all staff.
Advertisement
Hide AdAdvertisement
Hide Ad'All breaches are taken very seriously and we examine each one to see what action needs to be taken and what lessons can be learned. We report serious data breaches to the ICO in line with their published guidance.
'In the last four years we've reported 13 incidents, 12 of which resulted in a decision by the ICO to take no action.’
As a result of the incident that was also reported to the police, the member of staff involved had to complete information governance and GDPR online training, read data in transit policy and was provided with a laptop bag lock.
A report that was heard by the council's governance and audit standards committee also detailed how between July 2019 and January 2020 there were 42 incidents of data breaches at the council.
These files contained information about 1,040 people potentially at risk. However, only this one was considered serious and in need of the ICO review.