Data Loss - What to Do
The Information Commissioner's Office (ICO) has issued guidance for organisations that lose personal data, having reported that it has been notified of nearly 100 such incidents to date.
One of the less intuitively obvious suggestions is to think carefully about whether all the potentially affected people need to be notified. For example, notifying all your customers about a security glitch which in reality affects only a small proportion of them may produce a flood of enquiries and requests for further information from unaffected people, as well as possibly undermining their confidence in your organisation.
What is advisable is to obtain an accurate understanding as soon as possible of the scale of the loss and the potential impact on the people whose personal information has been lost. For example, if the information is such as to make identity fraud a possibility, it is likely to be more important to notify the people concerned than if the lost information is simply a list of names and addresses (which could be obtained easily from other sources).
The ICO advises that there are four important elements to consider when creating a breach management plan. These are:
1. Containment and recovery;
2. Assessment of ongoing risk;
3. Notification of breach; and
4. Evaluation and response.
|
|
|
Data security is an important but widely neglected issue for many organisations. Failure to follow adequate data protection procedures can have severe consequences, not only from the point of view of fines, but also damage to reputation and possible claims for losses suffered by those whose data has been compromised. We can assist you in helping to make sure that your legal risks due to data loss are minimised.
Related Articles
Ground Floor, Griffin House, 15-16 Lower Park Row, Bristol BS1 5BN
T 0117 929 9001 F 0117 3164900
VAT Registered No. 137 8318 52
24hr Criminal defence helpline Tel 0117 9298987
E info@bobbetts.com
Authorised and regulated by the Solicitors Regulation Authority (SRA). SRA number 70535.