Belinda Perrin

Dear Shropshire Council,

I would like to know to what extent you have implemented data loss prevention strategies and losses that you have incurred specifically covering the following;

a) How many data losses have you incurred in the last 24 months relating to the following

USB loss (to include data theft by employees as well as just lost USB devices)
Email leakage (accidental and also malicious)
Laptop theft

To each of the above please provide an indication of what data was lost or stolen and the estimated cost associated with that loss

b) What policies do you have in place surrounding

Encryption of data on Laptops, devices and email
Data transfer between departments and organisations under your control/guidance
The use of removable storage devices

c) What tools have you implemented to help meet data protection requirements to ensure that data is stored and transferred securely and not kept longer than necessary?

d) What was the cost of these tools - initial licence cost and ongoing support/maintenance contracts?

I look forward to receiving your response

Yours faithfully,

Belinda Perrin

Shropshire Council

Dear Ms Perrin

Re: Information Request - Reference Number: 2011050055

Thank you for your request for information received on 17 May 2011. We
are currently processing your request in accordance with the relevant
legislation and will respond to you within 20 working days.

You have requested details regarding data losses as outlined in the letter
of request.
(Please note this may be a summary of your request and full details, as
outlined in the request, will be sent to the team providing the
information)

If you feel the information is inaccurate or requires amendment, please
notify us as soon as possible using the contact details provided below.

Yours sincerely

Heather Jones
Assistant Information Governance Officer
Information Governance Team
Shropshire Council
Shirehall
Abbey Foregate
SHREWSBURY
SY2 6ND

Tel: 01743 252179 / 01743 252774
Email: [Shropshire Council request email]
Web: www.shropshire.gov.uk/foi.nsf

show quoted sections

Shropshire Council

4 Attachments

Dear Ms Perrin

Further to your recent Freedom of Information request which we received on
17 May, please find our response below.

a) How many data losses have you incurred in the last 24 months relating
to the following

- USB loss (to include data theft by employees as well as just lost USB
devices)

One, unencrypted memory stick incident.

- Email leakage (accidental and also malicious)

None.

- Laptop theft

None.

To each of the above please provide an indication of what data was lost or
stolen and the estimated cost associated with that loss

The memory stick contained 3554 social care client records. This is
publicly reported on the Information Commissioner's Office website:

http://www.ico.gov.uk/what_we_cover/prom...

We have not calculated the cost of the incident listed. Therefore this
information is not held.

b) What policies do you have in place surrounding

- Encryption of data on Laptops, devices and email
- Data transfer between departments and organisations under your
control/guidance
- The use of removable storage devices

Please refer to attached policies and guidance.

c) What tools have you implemented to help meet data protection
requirements to ensure that data is stored and transferred securely and
not kept longer than necessary?

* Laptop/data encryption
* Hardware encrypted memory sticks
* USB device blocking/management software
* Email monitoring/filtering software

d) What was the cost of these tools - initial licence cost and ongoing
support/maintenance contracts?
The costs are included as part of part of wider IT network implementation
and are not split out individually.

We trust that this answers your request satisfactorily. However, if you
should require any further information, please do not hesitate to contact
us.

Yours sincerely

Information Governance Team

show quoted sections

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org