The ICO have revealed that North Lanarkshire Council have failed to protect the data of vulnerable adults after paper records were stolen from an employee’s bag. After an investigation the ICO determined there had been a breach of data laws and council chief executive Gavin Whitefield must sign an undertaking to put in place the correct policies and procedures to avoid a repeat of the issue.
The ICO claimed the council had provided inadequate guidance for its employees, leading to a Home Support Worker leaving the bag unlocked with mental and physical health records for six vulnerable adults inside.
Ken Macdonald, the assistant commissioner for Scotland said:
“It is never acceptable for papers containing sensitive personal information to be left in an unlocked bag without necessary precautions. The council's guidance on the handling of this type of information was inadequate and failed to advise staff on the best means of keeping information safe.”
Once again the ICO have avoided fining an institution that has failed to protect the sensitive information of vulnerable people.
What will it take?