Encrypted USB stick glitch led to Council data loss

Cambridgshire reprimanded by Information Commissioner's Office

A council that used encrypted memory sticks has been handed a reprimand from the Information Commissioner's Office (ICO) after an employee's struggle to use the technology resulted in data being lost on an unsecured replacement drive.

According to a release put out by the ICO, Cambridgeshire County Council lost a stick containing case and meeting notes relating to least six 'vulnerable adults' in the council's care, which it reported to the organisation last November.

The highly unusual dimension to this case is that the non-encrypted memory stick had only been used after an employee "encountered problems" using the encrypted one handed out by the Council.

The nature of the problem has not been revealed but underlines the problems organisations can encounter when using potentially complex technologies such as encryption.

If passwords are forgotten, procedures need to be in place to receive a new one quickly. If the drive fails for a technical reason, staff need to have a convenient fallback that doesn't involve simply using an unsecured replacement.

"While Cambridgeshire County Council clearly recognise the importance of encrypting devices in order to keep personal data secure, this case shows that organisations need to check their data protection policies are continually followed and fully understood by staff," said the ICO's enforcement group manager, Sally Anne-Poole.

In fact the council had undertaken an internal campaign to promote the use of encryption shortly before the loss.

The Council has escaped more serious action by signing up to a public undertaking to improve procedures although it is not clear how this differs from those in place at the time of the drive's loss.

The case will probably be glossed over by companies that sell products in this field but admins will be well aware of the underlying issues. Encryption can secure data but it can be a complex and time-consuming technology to manage in real-world situations.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securitystorageInformation Commissioner's Office

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E Dunn

Techworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?