UK COMPUTERS WITH MEDICAL DETAILS STOLEN Council warned after laptop thefts - The Inverness Courier:

Council warned after laptop thefts
Published: 22 July, 2009

HIGHLAND Council has been found in breach of the Data Protection Act after two laptop computers containing personal information - including the medical details of around 1400 people - were stolen from its Inverness headquarters.

Both laptops were password protected and stored in a locked office, but they were not encrypted and no additional security measures were in place.

The Information Commissioner's Office will take no further action this time, but has warned the council if it happens again, enforcement action will be taken and it could end up in court.

Council chief executive Alistair Dodds has pledged to ensure that all portable devices containing personal data, including laptops, are encrypted by 30th September. The council has also agreed to ensure that physical security measures and procedures are adequate to prevent the theft of devices containing people's personal details.

"The stolen laptops contained sensitive personal information, including health records," explained assistant information commissioner Ken Macdonald. "I urge all councils and their executive teams to ensure that data protection is treated as an important part of corporate governance. Safeguarding sensitive personal information must be embedded in their organisational culture. No public body can afford to take risks with personal details, least of all health records."