15 Feb 2007
Nationwide Building Society has been fined £980,000 by the Financial Services Authority following the theft of a laptop containing details of nearly 11 million customers.
An official investigation following the loss discovered that Nationwide did not start its own investigation until three weeks after the event.
Jamie Cowper, EMEA marketing manager at data encryption firm PGP Corporation, said that the huge fine should serve as a warning to other companies not to play fast and loose with customer data.
He added that more must be done to protect customer information, particularly when it is stored on vulnerable portable devices such as laptops.
"The fact that Nationwide waited three weeks before even starting an investigation into the theft is a wake-up call to our culture of data complacency in the UK," said Cowper.
"The government should seriously consider adopting US-style data breach disclosure laws, where companies are compelled to act much sooner.
"And, of course, if more companies were using data security technologies such as encryption, laptop theft would quickly cease to be such a goldmine for criminals."
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
My multi- national Partner client has charged me exclusively...
Senior IT Operations Engineer -MCSE, IIS7/7.5, SAN, CDN...
I have an urgent requirement for short term contract...
User Interface Developer x 1/2 - Leading Organisation...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Utterly ridiculous
I can see no compelling reason for allowing personal data to be stored on portable devices let alone taken off the organisation's premises. Hopefully this fine will make such stupidity stop.
Posted by: Paul Prosser 22 Feb 2007