Records Dumping Triggers Hefty Fine

£250,000 Penalty for Scottish Borders Council
Records Dumping Triggers Hefty Fine

The UK Information Commissioner's Office has fined the Scottish Borders Council £250,000 after hundreds of former employees' pension records were found in a recycling bin in a supermarket parking lot.

See Also: Webinar | Passwords: Here Today, Gone Tomorrow? Be Careful What You Wish For.

The council is a local government entity that oversees the Scottish Borders area of Scotland.

The council hired a vendor to digitize its records but failed to seek guarantees on how the personal information would be kept secure, according to an ICO release.

An individual notified police that the files, which contained salary and bank account details, were in the recycling bin; authorities then recovered 676 files. Another 172 files were placed in a different recycling bin that same day and are believed to have been destroyed in the recycling process, the ICO says.

"The [council] put no contract in place with the third-party processor, sought no guarantees on the technical and organizational security protecting the records and did not make sufficient attempts to monitor how the data was handled," according to the release.

The penalty was issued under the Data Protection Act, which requires that an organization is still legally responsible for the security of its information, even if it hires a third-party organization to process it.

The ICO has offered guidance to small and medium-sized businesses on outsourcing.


About the Author

Jeffrey Roman

Jeffrey Roman

News Writer, ISMG

Roman is the former News Writer for Information Security Media Group. Having worked for multiple publications at The College of New Jersey, including the College's newspaper "The Signal" and alumni magazine, Roman has experience in journalism, copy editing and communications.




Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing databreachtoday.co.uk, you agree to our use of cookies.