ICO slaps car insurance firm after data loss

Jubilee Managing Agency lost an unencrypted disk containing details on 2,100 policyholders

Yet another company has had its knuckles rapped by the UK data protection watchdog, after losing over 2,000 personal details belonging to customers.

The Information Commissioner's Office (ICO) said that Jubilee Managing Agency, the parent of automobile insurance provider Jubilee Motor Policies, breached the Data Protection Act by misplacing an unencrypted disk containing the personal details of around 2,100 UK policyholders.

The firm has now signed a formal undertaking in which it promises to take reasonable measures to keep personal information secure in the future.

The ICO said that Jubilee suffered from a lack of detailed data security procedures and policies, and insufficient staff training.

Sally-Anne Poole, head of enforcement and investigations at the ICO, explained that organisations must ensure that information is accurate and up to date.

"Organisations should only retain personal information for as long as necessary," she said. "It is a matter of some concern to us that expired policies, including financial details, were still available and stored on unencrypted devices."