The Residence Workplace has been reprimanded by a watchdog after delicate counter-terrorism paperwork have been left at a London venue.
The paperwork, which have been handed to the police in September final yr after being discovered by venue employees, included two studies from the Authorities division’s extremism evaluation unit and a counter-terrorism policing report.
Each contained private information, together with that of Metropolitan Police employees, the Info Commissioner’s Workplace (ICO) stated.
The watchdog discovered the Residence Workplace “failed to make sure an acceptable degree of safety of private information” and for paperwork categorized as “official delicate”, so issued Residence Secretary Suella Braverman, the division’s information controller, with a proper reprimand.
I count on the division to take steps to keep away from related errors sooner or laterInfo Commissioner John Edwards
Info Commissioner John Edwards stated: “Authorities officers are anticipated to work with delicate paperwork with a view to run the nation. There's an expectation, each in legislation and from the folks the Authorities serves, that this info will probably be handled respectfully and securely.
“On this occasion that didn't occur, and I count on the division to take steps to keep away from related errors sooner or later.”
The investigation additionally concluded the Residence Workplace didn't have a correct course of for signing out paperwork from its places of work and will have reported the incident to the ICO inside a 72-hour time restrict.
In a letter to Residence Workplace everlasting secretary Matthew Rycroft, the ICO stated the breach was not reported by the division till April 4 this yr regardless that its employees had been knowledgeable the day after the incident.
An envelope containing 4 paperwork categorized as “official delicate” was discovered on the venue by employees on September 5 2021.
They handed them to police the following day, who gave them again to the Residence Workplace.
The papers contained the private information of two Met employees and a “international United Kingdom visa applicant who's the topic of the paperwork”.
A Cupboard Workplace investigation concluded the Residence Workplace was the most probably supply of the paperwork.
The ICO didn't say the place the incident came about and refused to verify the kind of venue, apart from it was a “public” place.
A spokeswoman for the physique stated offering particulars of the venue was “not obligatory”.
The Residence Workplace has since taken steps to keep away from related breaches occurring sooner or later, the ICO stated, however it referred to as for extra enhancements to be made, together with a assessment of how such paperwork needs to be dealt with, a correct course of for signing out paperwork from places of work and a assessment of coaching for workers on dealing with data containing private information.
Responding to the ICO’s reprimand, a Residence Workplace spokesman stated: “The UK has one of the vital sturdy and clear oversight regimes for the safety of private information and privateness wherever on this planet.
“We notice the choice revealed by the Info Commissioners Workplace in the present day and can take its implications into consideration.
“We proceed to make sure that sturdy controls and unbiased oversight are in place to make sure we're absolutely compliant with necessities on processing of private information.”