Praxis Care gets slapped wrist from ICO

Data security

Praxis Care gets slapped wrist from ICO

Kathleen Hall

Health provider Praxis Care has been found in breach of the Data Protection Act by the Information Commissioner’s Office (ICO) after losing an unencrypted memory stick.

The stick containing personal information of 107 Isle of Man residents and 53 individuals from Northern Ireland was lost on the Isle of Man in August 2011. Some of the information related to individuals’ care and mental health. The stick has not been recovered, but Praxis has informed all affected individuals.

Praxis had a joint action taken against it by the Information Commissioner’s Office (ICO) and the Office of the Data Protection Supervisor (ODPS) for the Isle of Man.

Christopher Graham, UK Information Commissioner, said: “Carrying people’s personal information around on an unencrypted memory stick is clearly unacceptable. The fact that some of the personal details stored on the device were out of date and so surplus to requirements makes this breach all the more concerning.”

Praxis said it has now committed to making sure that all portable devices used to store personal data are encrypted.

But Chris McIntosh, CEO of security provider ViaSat UK, said the ICO should take tougher action on such data breaches. 

“In this case, Praxis was lucky to only receive an undertaking. Lessons it and others should take from this are that sensitive data should be encrypted at all times and should not be kept when it is no longer useful. At the same time, the ICO should not stop lobbying for more powers to enforce its responsibilities,” he said.

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy