European Data Protection Digest

ICO Fines Council £250,000, Another Reveals Breach

DATA LOSS—UK

September 13, 2012

The Information Commissioner’s Office (ICO) has fined Scottish Borders Council £250,000 for a breach involving the personal information of employees. “This is a classic case of an organization taking its eye off the ball when it came to outsourcing,” said ICO Assistant Commissioner for Scotland Ken Macdonald. The council had contracted an outside company to digitize pension records but failed to “seek appropriate guarantees on how the personal data would be kept secure,” according to an ICO press release. Meanwhile, The Star reports Sheffield Council could face similar fines after confidential files on mental health patients were found on a city street.
Full Story