Marks & Spencer
Marks & Spencer failed properly to secure information held on a company laptop
R E L A T E D   C O N T E N T
ADVERTISEMENT

M&S rapped for Data Protection breach

This is not just data loss – this is your data loss

Robert Jaques, vnunet.com 28 Jan 2008
ADVERTISEMENT

The Information Commissioner's Office (ICO) has found Marks & Spencer in breach of the Data Protection Act.

The ruling follows the theft of a laptop in May 2007 which contained unencrypted personal information on 26,000 M&S employees.

An ICO investigation revealed that the laptop, which contained details about pension arrangements, was stolen from the home of an M&S contractor.

The UK data watchdog said that the sensitive nature of the information meant that M&S should have had appropriate encryption measures in place to keep the data secure.

Mick Gorrill, assistant commissioner at the ICO, said: "It is essential that before a company allows personal information to leave its premises on a laptop there are adequate security procedures in place to protect personal information.

"The ICO has issued clear guidance to help employers understand their obligations under the Data Protection Act.

"Organisations which process personal information must ensure that information is secure. If organisations fail to introduce safeguards to protect information they risk losing the trust and confidence of employees and customers."

The ICO has issued M&S with an Enforcement Notice which orders the company to ensure that all laptop hard drives are fully encrypted by April 2008.

Failure to comply is a criminal offence and may result in the ICO taking further action against the company.

See also:

Parliamentary meeting reveals catalogue of errors  22 Jan 2008
Latest data blunder affects 600,000 people  21 Jan 2008
Presenter loses £500 to fraudsters  08 Jan 2008
Justice Select Committee demands heavy fines and/or jail terms  03 Jan 2008
Marks & SpencerThis is not just spam, this is your spam  06 Jun 2007

All Enterprise Security Technology

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
Liverpool, United Kingdom | South Liverpool Housing Group
 Head of Information, Communication & Technology - £38,950 - £41,000 + benefits - Liverpool The SLH Group is a housing association responsible for 3,400 homes in Speke and Garston - two of Liverpool's most challenging ... more >
Reading, Berkshire, United Kingdom | EDS
Job Description: A skilled System Integrator to integrate application hosting environments to support business requirements. The Candidate will possess specific experience of enterprise systems, component validation and integrating technical Infrastructures and system management facilities within ... more >
United Kingdom | Nottingham University NHS
Analyst/Developer - Nottingham University NHS - £24,103 - £32,653   An analyst/developer is required within the Systems Development Section of Nottingham University Hospitals ICT Services. The successful applicants will be part of a team whose ... more >
Reading, Berkshire, United Kingdom | EDS
Position # 397874 IP Network Administrator Location - Reading Job Description: There is a requirement for an IP network administrator to join the Infrastructure Services operational support team to manage the movement of network resources, ... more >
More job opportunities