Alzheimer's Society lost personal details of 1,000 staff

IT | Gareth Jones | 12 Feb 2010

The Alzheimer’s Society has been publicly reprimanded after it admitted to three separate breaches of the Data Protection Act in 2009.

The Information Commissioner’s Office (ICO) revealed this week that, in the most serious incident, several unencrypted laptops were stolen during a burglary at the charity’s Cardiff office last August.

One of the laptops contained personal details including names, addresses, national insurance numbers and salary details for roughly 1,000 of the charity’s staff.

The laptops had not been physically secured with cable locks or locked away securely.

The Society has now signed a formal undertaking promising to improve security and ensure staff are made aware of its policies for the storage, use and disposal of personal information.

Staff will also receive appropriate training on how to follow these policies.

ICO: 'Portable devices must be encrypted'

Sally-anne Poole, head of investigations at the ICO, said: “A thousand staff members’ details were stored on unencrypted laptops.

“This is unacceptable; portable devices must be encrypted if they are used to store personal information. It is vital that all organisations ensure personal information is handled securely and that appropriate staff have adequate training in this area.”

Ruth Sutherland, acting chief executive at the Alzheimer’s Society, said: “Alzheimer’s Society takes information security very seriously and as soon as we found out about the thefts we reported them to the Information Commissioner’s Office.

“All staff impacted and everyone who works at the Society were also immediately informed.

“Unfortunately the laptops were stolen as they were waiting to be encrypted. However, before the incidents, the Society had already begun rolling out an information governance programme.”

Directory: Alzheimer's Society

Comments

[Cancel] | Reply to:

Name *

Email *

Organisation

Job Title

Comments *

Verification *

* Please read our Community Standards

Close »

Community Standards

The civilsociety.co.uk community and comments board is intended as a platform for informed and civilised debate.

We hope to encourage a broad range of views, however, there are standards that we expect commentators to uphold. We reserve the right to delete or amend any comments that do not adhere to these standards.

We welcome:

Robust but respectful debate
Strongly held opinions
Intelligent relevant discussion
The sharing of relevant experiences
New participants

We will not publish:

Rude, threatening, offensive, obscene or abusive language, or links to such material
Links to commercial organisations or spam postings. The comments board is not an advertising platform
The posting of contact details for yourself or others
Comments intended for malicious purpose or mindless abuse
Comments purporting to be from another person or organisation under false pretences
Gratuitous criticism, commentary or self-promotion
Any material which breaches copyright or privacy laws, or could be considered libellous
The use of the comments board for the pursuit or extension of personal disputes

Be aware:

Views expressed on the comments board are left at users’ discretion and are in no way views held or supported by Civil Society Media
Comments left by others may not be accurate, do not rely on them as fact
You may be misunderstood - sarcasm and humour can easily be taken out of context, try to be clear

Please:

Enjoy the opportunity to express your opinion and respect the right of others to express theirs
Confine your remarks to issues rather than personalities

Together we can keep our community a polite, respectful and intelligent platform for discussion.