The Information Commissioner's Office (ICO) has fined Surrey County Council £120,000 for lax data protection practices, 24dash.com reports. The council breached the Data Protection Act in May 2010 when it e-mailed a file containing sensitive personal data to the wrong recipients, the report states. Two separate incidents involving misdirected e-mails occurred in June 2010 and January 2011. "This significant penalty fully reflects the seriousness of the case," said Information Commissioner Christopher Graham in a press release. "Surrey County Council has paid the price for their failings, and this case should act as a warning to others that lax data protection practices will not be tolerated."
If you want to comment on this post, you need to login.