ICO fines Welsh police for sensitive data breach

After the loss of a highly-sensitive DVD testimony, the ICO has issued a fine totaling £160,000 to South Wales Police and has asked the police force to sign an undertaking that ensures new, enforced policies that will stop future breach incidents. The DVD, which has still not been recovered, contains an interview recorded in 2011 that recounts the graphic and disturbing testimony of a victim of sexual abuse. Just two months after the recording, the DVD went missing, but the breach remained unreported for as long as two years due to "lack of training," the ICO told SCMagazineUK.com.

“The organisation has failed to take all appropriate measures against the unauthorised processing and accidental loss of personal data" Anne Jones, ICO Assistant Commissioner for Wales, commented in an email to SC. "This breach is extremely serious."

Jones continuted: “The monetary penalty given to South Wales Police should send a clear message that organisations have to take responsibility for personal data and the way in which it is stored.”