School admits to loss of laptop containing sensitive personal data of over 1,000 pupils and staff

A school has admitted storing sensitive personal data of about 1,200 pupils and staff on an unencrypted laptop, which was subsequently stolen. The Information Commissioner’s Office – the regulator in charge of enforcing data protection laws in the UK – has decided not to issue an enforcement notice for breaches of the Data Protection Act 1998 against Waseley Hills High School and Sixth Form Centre in Birmingham. The ICO was satisfied with the school’s undertakings to increase security held on portable devices, use encryption where appropriate and train staff on data security issues.