Information Commissioner ‘sounds the alarm’ on data breaches within the legal profess

[Legal Beagles]

The Information Commissioner’s Office (ICO) is warning barristers and solicitors to keep personal information secure, especially paper files. This follows a number of data breaches reported to the ICO involving the legal profession. The ICO can serve a monetary penalty of up to £500,000 for a serious breach of the Data Protection Act provided the […]

More...

[bluebottle]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

Although I will readily put my hands up to going on about the ICO's powers, this warning from ICO serves to illustrate that data controllers cannot afford to be complacent where personal data is involved.

[righty]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

Really! Another rather bland statement from a regulator which may or may not have any truth in reality. When, where AND how did these 'breaches' take place AND wouldn't it be a good idea for the ICO to tell us precisely what happened so the legal profession & others can guard against such 'mistakes'

[Amethyst]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

One reported yesterday ... Child protection case files dropped in the street and handed in to police and some concerns over home working lawyers files being unsecure

[Amethyst]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

Here.. http://www.lawgazette.co.uk/practice...042540.article

The council said it has put in place a new home-working policy which includes guidance on the security of paper documents for staff. Solicitors will have to complete mandatory data protection training and the council’s data protection policy will also be amended.
In a statement, Oxfordshire County Council said the loss was an ‘unfortunate incident’ which should not have happened and it confirmed ‘appropriate disciplinary action’ has been taken against the person involved, the details of which are confidential.
The statement added: ‘The county council referred itself to the information commissioner about this episode and is putting in place the recommendations which were fed back. Fortunately no harm was done and the misplacement of these documents had no negative bearing on the child protection cases they were to do with.’

[bluebottle]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

Plymouth City Council made a blunder with child protection files that resulted in the ICO slapping them with a £180,000 fine.

In the case you have highlighted, Amethyst, involving Oxfordshire County Council, the Council has taken action to mitigate any detrimental effect or harm to individuals and which the ICO has to take into consideration when deciding whether to take enforcement action and, if so, what action.

[Johnboy007]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

‘appropriate disciplinary action’ has been taken against the person involved, the details of which are confidential.

Slap on the wrist??????

[bluebottle]

Re: Information Commissioner ‘sounds the alarm’ on data breaches within the legal pro

‘appropriate disciplinary action’ has been taken against the person involved, the details of which are confidential.

Slap on the wrist??????

If it was "management advice", that is not taking the matter seriously. If it was a written warning, that is somewhere between not taking it seriously and not taking it seriously enough. If it was a final written warning, that is more appropriate, if the gravity of the blunder warrants it. If not, then dismissal would be the only avenue open.

Taking into account the harm failing to ensure the security of personal data can do, employers really do need to take their data protection responsibilities a lot more seriously and any disciplinary action should reflect this.