Praxis Care gets slapped wrist from ICO

Data security

Praxis Care gets slapped wrist from ICO

Kathleen Hall

Health provider Praxis Care has been found in breach of the Data Protection Act by the Information Commissioner’s Office (ICO) after losing an unencrypted memory stick.

The stick containing personal information of 107 Isle of Man residents and 53 individuals from Northern Ireland was lost on the Isle of Man in August 2011. Some of the information related to individuals’ care and mental health. The stick has not been recovered, but Praxis has informed all affected individuals.

Praxis had a joint action taken against it by the Information Commissioner’s Office (ICO) and the Office of the Data Protection Supervisor (ODPS) for the Isle of Man.

Christopher Graham, UK Information Commissioner, said: “Carrying people’s personal information around on an unencrypted memory stick is clearly unacceptable. The fact that some of the personal details stored on the device were out of date and so surplus to requirements makes this breach all the more concerning.”

Praxis said it has now committed to making sure that all portable devices used to store personal data are encrypted.

But Chris McIntosh, CEO of security provider ViaSat UK, said the ICO should take tougher action on such data breaches. 

“In this case, Praxis was lucky to only receive an undertaking. Lessons it and others should take from this are that sensitive data should be encrypted at all times and should not be kept when it is no longer useful. At the same time, the ICO should not stop lobbying for more powers to enforce its responsibilities,” he said.


Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
 

COMMENTS powered by Disqus  //  Commenting policy