back to article Insurance giant rapped on knuckles over DPA breach

Insurance firm Amicus Legal has been put on notice for breaches of the Data Protection Act, after it failed to protect sensitive customer data on a laptop that was subsequently stolen. The laptop, privately owned by a contracted consultant, contained an estimated 100,000 unencrypted customer records. The sensitive data held on …

COMMENTS

This topic is closed for new posts.
  1. Lionel Baden

    ugghhhh

    why do they have to lose something before they do anything about it !

  2. Gordon Pryra

    What about the breachs by the Civil Service?

    I’m not sure I've heard many repercussions from the hundreds of losses of personally identifiable data by our Overlords and Masters

  3. Anonymous Coward
    Thumb Down

    So the punishment....

    ...for losing "an estimated 100,000 unencrypted customer records" is to be told not to do it again?

    WTF do you have to lose before you get prosecuted?

  4. Anonymous Coward
    Flame

    1 Rule for one 1 Rule for another

    What about the .GOV?

    HMRC

    losing the data. Why dont they get a roasting like this?

    Flaming democracy at work!

  5. Les Matthew

    @Gordon Pryra

    "I’m not sure I've heard many repercussions from the hundreds of losses of personally identifiable data by our Overlords and Masters"

    I think you'll find that they are going to get a serious spanking at the next general election.

  6. Anonymous Coward
    Flame

    Insane

    What actually happened:

    Data protection people: Hi, you broke the law. Please can you tell us you won't do it again?

    Amicus Legal: Sure, we'll tell you that.

    Everyone else: Right, we can totally ignore the data protection act. If we lose some data then we'll try to keep it quiet; if that fails then we might have to start following the law.

    What should have happened:

    Data protection people: Hi, you broke the law. Please pay £x00,000 fines, £x00,000 compensation, and we're going to criminally prosecute a couple of your directors.

    Everyone else: Oh, we better start complying with the law.

  7. Richard Kay

    who paid when the Nationwide paid for this ?

    The people who paid the Nationwide fine of £980,000 for a similar breach of the DPA a couple of years ago were the victims of the data loss, account holders like yours truly who own this non-profit making mutual. I still prefer it being a mutual to it being a private bank.

  8. Ascylto
    Black Helicopters

    Yet another loss!

    And government want us to have ID Cards!

    The former Data Commissioner who warned us about "Sleepwalikg into a surveillance society" today stated there had been at least 200 breaches of data, some serious, since the last review.

    There's only one way to solve this ... open prosecution and massive fines for breaches. Hit companies and personnel in their pockets and in the courts.

    And government want us to have ID Cards! Are we mad?

  9. David Cameron
    Linux

    Compensation?

    Maybe there should be a massive fine for breaches like this. How about it being a fixed rate with an escalator for subsequent offenses from the same organisation? I would suggest that it works on the number of records, so £100 per record for the first offense. £200 per record for the second offense --- £300 for the third and so on.

    Then there is the compensation for the victims of the transgression. Let's say £10,000 each for the first offense --- £20,000 each for the second --- £30,000 for the third and so on.

    Of course, to escape other than the first one they would work out something like a 'hive down' so that it is a 'new' organisation. Okay, ANY company which employs a director of a previous offending company will automatically carry the number of previous offenses by any and all comapnies in which any of its directors were employed.

    So director one comes from a two time offender and director two comes from a one time offender. That gives you THREE on the card to start with so YOUR first offense will be a FOUR TIMES PAYOUT !!

    You want your laws to work, then you need to make them work.

    Oh....I almost forgot....what about the employee who was stupid and careless enough to lose the stuff? Automatic dismissal (as a legal requirement) and add a code to his/her NI number making it ILLEGAL to employ (£1,000,000 fine for any breach) them anywhere remotely near sensitive data --- for life !

This topic is closed for new posts.

Other stories you might like