The social work records were reportedly duplicates of documents held in the council's offices and had apparently been used by a social worker during active casework duties. According to the ICO the files contained an extensive amount of personal data including information about the ethnicity, religious beliefs and physical or mental health conditions of individuals. In one instance, says the ICO, the data provided an almost complete picture of the individual's life.
Ged Fitzgerald, the council's chief executive, has signed an undertaking with the ICO promising to implement a formal written procedure for the removal or disposal of any office furniture or equipment. The ICO says that the undertaking also requires staff to be made aware of the council's policies for the storage, use and disposal of personal information and for the appropriate training to be provided.
Sally-Anne Poole, the ICO's head of enforcement, said that this incident highlights the importance of having the necessary safeguards in place to ensure personal information is disposed of securely. "Organisations need to have the appropriate policies in place and staff need to be aware of these policies to ensure personal information is stored securely," she said. "I am pleased that Lancashire County Council is taking action to prevent a similar situation occurring in the future," she added.