Data Loss Incidents

Belinda Perrin made this Rhyddid Gwybodaeth request to Worcestershire Mental Health Partnership NHS Trust

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Roedd y cais yn llwyddiannus.

Dear Worcestershire Mental Health Partnership NHS Trust,

I would like to know to what extent you have implemented data loss prevention strategies and losses that you have incurred specifically covering the following;

a) How many data losses have you incurred in the last 24 months relating to the following

USB loss (to include data theft by employees as well as just lost USB devices)
Email leakage (accidental and also malicious)
Laptop theft

To each of the above please provide an indication of what data was lost or stolen and the estimated cost associated with that loss

b) What policies do you have in place surrounding

Encryption of data on Laptops, devices and email
Data transfer between departments and organisations under your control/guidance
The use of removable storage devices

c) What tools have you implemented to help meet data protection requirements to ensure that data is stored and transferred securely and not kept longer than necessary?

d) What was the cost of these tools - initial licence cost and ongoing support/maintenance contracts?

I look forward to receiving your response

Yours faithfully,

Belinda Perrin

MHP FOIRequest,

Dear Belinda

REF: Freedom of Information Request - 300311/USBLoss

I acknowledge receipt of your Freedom of Information request which was received on 30th March 2011.

Your FOI request for Worcestershire Mental Health Partnership NHS Trust has been logged and we will be responding to you in due course with the information you require.

Yours sincerely,
FOI Coordinator

MHP FOIRequest,

Dear Belinda

REF: Freedom of Information Request - 300311/USBLoss

The Trust received a Freedom of Information Act 2000 request from you
dated 30^th March regarding the Data Loss. The information has been listed
below:-

a) How many data losses have you incurred in the last 24 months
relating to the following: USB loss (to include data theft by employees as
well as just lost USB devices) | 1 USB stick stolen (with one of the
laptops below). No data loss reported

b) E-mail leakage (accidental and also malicious) | 0

c) Laptop theft | 3 laptops stolen. All laptops Safeboot
protected, so no data loss.

d) To each of the above please provide an indication of what data
was lost or stolen and the estimated cost associated with that loss | The
cost of replacement laptop to the Trust is around £600

e) What policies do you have in place surrounding | The policies
already in the public domain and can be viewed from website :
www.worcsmhp.nhs.uk

· Encryption of data on Laptops, devices and email

· Data transfer between departments and organisations under your

· control/guidance

· The use of removable storage devices

f) What tools have you implemented to help meet data protection
requirements to ensure that data is stored and transferred securely and
not kept longer than necessary? | Outlined in the above policies and also
the Records Management Policy obtainable from our website.

If you have any queries about this letter, please contact me. Please
remember to quote the reference number above in any future communications.

If you are unhappy with the service you have received in relation to your
request and wish to make a complaint or request a review of our decision,
you should write to the Chief Executive, Worcestershire Mental Health
Partnership NHS Trust, Isaac Maddox House, Shrub Hill Road, Worcester.

If you are not content with the outcome of the complaint or review you may
apply directly to the Information Commissioner for a decision. Generally,
the ICO cannot make a decision unless you have exhausted the complaints
procedure provided by the Trust. The Information Commissioner can be
contacted at: The Information Commissioner’s Office, Wycliffe House,
Water Lane, Wilmslow, Cheshire SK9 5AF.

Yours sincerely

FOI Coordinator