ICO: Actions of interest
Published 18 June 2015
To view the ICO notice discussed below, please click here.
On 18 May 2015, South Wales Police were issued with a fine of £160,000 by the ICO. The significant fine followed the loss, by the police, of a video to be used as evidence in a sexual abuse case. The ICO reported that the video contained footage of the victim relaying childhood abuse. The police failed to encrypt the discs and had stored them in a drawer. The ICO ruled that the following technological and organisational measures should have been in place:
- Centralised storage/log
- Usage procedures/log
- Master copies
- Training in reporting security breaches
What action could be taken to manage risks that may arise from this development?
Companies should note that the ICO expected training to have occurred to staff in reporting security breaches.