ICO warns of data breach risk

The ICO said that staff need simple procedures on how to handle personal information with appropriate training to ensure the importance of personal information is fully understood.

"Many data security breaches are a result of human or technical error. Mistakes include staff disclosing personal details to the wrong people and automated machines which send letters out to the wrong addresses," it added.

The ICO said it is essential that the protection of people’s personal information is part of organisations’ culture and DNA.

David Smith, ICO deputy commissioner, said: “We all know that mistakes can happen but, the fact is that human error is behind a high proportion of security breaches that have been reported to us. Extra vigilance is required so that people’s personal information does not end up in the wrong hands. Organisations should have clear security and disclosure procedures that staff can understand, properly implement these and ensure that they are being followed by staff. Staff must be adequately trained not just in the value of personal information, but in how to protect it.

"The ICO’s Guide to Data Protection and our tips for avoiding wrongful disclosure will help minimise the risks of security breaches occurring. We are keen to work with organisations to prevent breaches happening in the first place and to help ensure that things are put right when they do go wrong.”