European Data Protection Digest

County Council Sends Data to Wrong Recipients

DATA LOSS—UK

February 25, 2011

The Isle of Anglesey County Council reported to the Information Commissioner's Office (ICO) last November that a contractor sent benefit, income and savings data to the wrong recipients. V3.co.uk reports that, upon investigation, the ICO discovered that the council had no contract in place for how the contractor was to process protected information. While the council escaped an ICO-imposed fine, it has signed a formal undertaking ensuring "the processing of personal data carried out on behalf of the council is performed under a written contract and that any contractor will act only on instruction from the council," the report states.
Full Story