The Information Commissioner’s Office (ICO) has criticised West Dunbartonshire Council over its lax approach to staff training when it comes to information security. The local authority has lost laptops and data and has been served an enforcement notice.
The issues go back to 2013 when the ICO first recommended retraining to the regional body. On this occasion a followup report in November suggested there had been improvement.
The problem was heightened the following year by a data breach in which a laptop containing a child’s case papers was stolen from an employee’s car, and the recommendation for more training plus a policy on home working was repeated.
An investigation showed that the employee in question had not been trained on the terms of the Data Protection Act, nor on how he should handle confidential data when working from home.
The ICO believes training is still lax, hence the new notice.