The recent spate of information security breaches has given rise to some new developments in data protection law. One in particular that everyone needs to be aware of is that there is a new standard for securing personal information held on laptops.
The Information Commissioner’s Office has published their "approach to encryption". The basic message is that any loss or theft of laptops resulting in loss of personal data that has not been protected by encryption will result in enforcement action. Enforcement action may involve the issue of an enforcement notice or being required to sign an undertaking to implement tighter security controls. Breach of an enforcement notice.is an offence under the Act. You can read the article here: http://www.ico.gov.uk/about_us/news_and_views/current_topics/Our%20approach%20to%20encryption.aspx
Now would be a good time to check your position regarding encryption facilities on laptops and making sure that it can be defended in case of loss or theft.
Mandy Webster
9 January 2008