Greater Manchester Police fined for memory stick theft
Tuesday 16 October 2012
A police force has been fined £120,000 following the theft of a memory stick containing names of members of the public who gave statements in drug probes.
The unencrypted device with no password protection was stolen from an officer's home and had details of 1,075 people with links to serious crime investigations stored over an 11-year-period.
The USB drive, belonging to the Greater Manchester Police drugs squad detective, is also understood to have included details of police operations, potential targets for arrest and names of officers.
It has not been recovered following the burglary at his home in July 2011 when his wallet, containing the stick, and his car keys were taken from his kitchen table.
The Information Commissioner's Office (ICO) said the consequences of the security breach "send a shiver down the spine".
In a report, ICO director of data protection David Smith said: "In this particular case the data subjects would suffer from substantial distress knowing their sensitive personal data may be disclosed to third parties even though, so far as the commissioner is aware, those concerns have not so far materialised.
"If the data has in fact been accessed by untrustworthy third parties then it is likely that the contravention would cause further substantial damage to the data subjects such as exposing physical harm."
A similar security breach took place at GMP in September 2010 but the force failed to comply with a direction to order all staff to use encrypted memory sticks.
A civil monetary penalty of £150,000 under the Data Protection Act was imposed by the ICO for the latest incident, which was reduced by 20% to £120,000 as the force took advantage of an early payment discount.
A further 1,100 memory sticks were recovered by the force when it offered an amnesty to staff with personal or unencrypted devices to hand them in.
Mr Smith said: "This was truly sensitive personal data, left in the hands of a burglar by poor data security. The consequences of this type of breach really do send a shiver down the spine.
"It should have been obvious to the force that the type of information stored on its computers meant proper data security was needed. Instead, it has taken a serious data breach to prompt it into action.
"This is a substantial monetary penalty, reflecting the significant failings the force demonstrated. We hope it will discourage others from making the same data protection mistakes."
Assistant chief constable Lynne Potts said: "This was very much an isolated incident. We take all matters relating to the storage of data extremely seriously and have stringent measures in place to ensure the safe storage of data."
It is understood the detective was internally disciplined and that all those whose names appeared on the device have been contacted.
As a white man, I'm surprised more women aren't tweeting the hashtag #KillAllWhiteMen
Scotland may have to leave the EU even if it votes to stay in, David Cameron confirms
Report finds that Britain's wages are the most unequal in Europe
Almost a third of school pupils believe 'Muslims are taking over our country', study claims
The day that Britain resigned as a global power
Gay marriage 'Bert and Ernie' cake bakery found guilty of discrimination in Northern Ireland
- 1 Crystal meth addict 'gouged out his eyes and ate them' while high on drug, Australian MP claims
- 2 As a white man, I'm surprised more women aren't tweeting the hashtag #KillAllWhiteMen
- 3 The ten most unequal developed countries in the world
- 4 Saudi Arabia 'seeking to head United Nations Human Rights Council'
- 5 Toddler throws a tantrum at the White House – in front of Barack Obama