Insurer Breaches DPA, Signs Undertaking
DATA LOSS—UKMarch 19, 2010
The group chief executive officer of Royal London Mutual Insurance Society has signed a formal undertaking with the Information Commissioner's Office, promising to improve data protection efforts. According to an ICO press release, the company breached the Data Protection Act by not properly securing eight laptops, which were stolen from the company's Edinburgh offices. The computers were password protected, but not encrypted. In the undertaking, the company promises to encrypt portable and mobile devices and to implement appropriate physical security measures. "I am pleased the Royal London Mutual Insurance Society Ltd has agreed to take further remedial steps to prevent a similar incident happening again," said ICO Head of Enforcement Mick Gorrill.