Improper Disposal Undermines Data Security

Organisations Can be Prosecuted for Failing to Comply With the Terms of the Data Protection Act

The Data Protection Act (1998) Obliges Organisations to Ensure: “Appropriate technical & organisational measures shall be taken against unauthorised or unlawful processing of personal data & against accidental loss or destruction of, or damage to, personal data”. The Information Commissioner's Office has issued severe monetary penalty notices to organisations who not only experienced an actual data leak, but also to organisations who knew there was a risk of a data leak, but failed to act. Such high penalties quite rightly fuel fear and organisations must prioritise data security, including ensuring partners responsible for disposing of hard drives do so properly.