Praxis Care gets slapped wrist from ICO
Health provider Praxis Care has been found in breach of the Data Protection Act by the Information Commissioner’s Office (ICO) after losing an unencrypted memory stick.

Health provider Praxis Care has been found in breach of the Data Protection Act by the Information Commissioner’s Office (ICO) after losing an unencrypted memory stick.



UK IT Priorities 2018 survey results
Download this e-guide to discover the results of our 2018 UK IT Priorities survey, where IT leaders shared with us what they are going to be investing in over the coming 12 months.
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.
The stick containing personal information of 107 Isle of Man residents and 53 individuals from Northern Ireland was lost on the Isle of Man in August 2011. Some of the information related to individuals’ care and mental health. The stick has not been recovered, but Praxis has informed all affected individuals.
Praxis had a joint action taken against it by the Information Commissioner’s Office (ICO) and the Office of the Data Protection Supervisor (ODPS) for the Isle of Man.
Christopher Graham, UK Information Commissioner, said: “Carrying people’s personal information around on an unencrypted memory stick is clearly unacceptable. The fact that some of the personal details stored on the device were out of date and so surplus to requirements makes this breach all the more concerning.”
Praxis said it has now committed to making sure that all portable devices used to store personal data are encrypted.
But Chris McIntosh, CEO of security provider ViaSat UK, said the ICO should take tougher action on such data breaches.
“In this case, Praxis was lucky to only receive an undertaking. Lessons it and others should take from this are that sensitive data should be encrypted at all times and should not be kept when it is no longer useful. At the same time, the ICO should not stop lobbying for more powers to enforce its responsibilities,” he said.
Read more on IT for government and public sector
-
Why Windrush scandal demonstrates the importance of technology to political decision-making
-
Bringing military discipline to UK Technical Education and Training
-
GDS needs to prove it can still transform government after loss of data policy to DCMS
-
Crossing the watershed – digital skills crises will soon be history
Start the conversation
0 comments