Welsh councils broke data protection laws 135 times
Welsh councils broke data protection laws 135 times
(about 1 hour later)
Councils in Wales broke data protection laws twice as often last year as they did in 2012, BBC Wales has learned.
Councils in Wales broke data protection laws twice as often last year as they did in 2012, BBC Wales has learned.
Examples included a bag containing papers for a court case being left on a train, and sensitive personal data appearing on a website.
Examples included a bag containing papers for a court case being left on a train, and sensitive personal data appearing on a website.
The laws were broken 135 times in 2013 compared to 60 breaches in 2012.
The laws were broken 135 times in 2013 compared to 60 breaches in 2012.
The Information Commissioner's Office (ICO) called for effective data handling to be "hardwired" into the culture of local authorities.
The Information Commissioner's Office (ICO) called for effective data handling to be "hardwired" into the culture of local authorities.
Five of the 22 councils said they had recorded no breaches last year.
The details from the 22 councils have been obtained by BBC Wales through a Freedom of Information request.
BBC Wales obtained the details through a Freedom of Information request.
It showed:
In 2013, Cardiff council recorded 14 breaches including financial information about 15 employees was given to third parties and information being stolen from an employee's car, who was later disciplined.
Anne Jones, Assistant Information Commissioner for Wales, said: "It's important local authorities live up to their legal responsibilities under the Data Protection Act.
A council spokesperson said a number of new measures have been introduced during the past 12 months.
"Keeping people's personal information secure should be hardwired into their culture as losses can seriously affect reputations and as a consequence, service delivery".
There were 45 incidents in Powys council of which 25 were confined internally to the council, four were due to external providers of services and six were still under investigation.
The council said it has "taken a number of steps including training, revision of policies and further roll out of encrypted laptops".
At Wrexham council, there were 13 incidents, including one in the adult social care department where personal information was passed incorrectly to a third party.
In Gwynedd council there were 10 breaches, including personal details being mistakenly sent, and letters and emails being sent to the wrong people.
'Disclosed in error'
Flintshire council recorded nine breaches, including a fax containing personal data being sent to the wrong care provider, and a customer receiving someone else's personal data.
Nine incidents were recorded in Newport council - eight incidents were classified as "disclosed in error" and there was one case of "lost or stolen paperwork".
Caerphilly council said six breaches had occurred including an incorrect decision was made on the disclosure of a person's personal data to a third party, and one person's personal data was lost within the authority.
There were five breaches at Anglesey council including a bag containing papers for a court case being left on a train, documents stolen from a private residence, and a letter, fax and email were sent to the wrong people.
Carmarthenshire council failed to answer five requests for information within 40 days. In two of these cases, further information came to light that should have been supplied with the response to the request.
Bridgend council had three breaches including a laptop being stolen from a car and a document containing sensitive personal data being sent to the wrong printer.
Monmouthshire council said there "were no significant breaches in 2013" while Conwy council said "some events occurred which included sending emails, a fax and correspondence to unintended recipients, and information stolen from a vehicle/property".
There were four breaches at Merthyr Tydfil council along with two at Pembrokeshire and three at Denbighshire.
Rhondda Cynon Taf council self-reported one breach to the ICO about disclosing personal information through email by accident and Torfaen council had one breach which was an email with personal information sent to the wrong recipient.
There were no breaches in 2013 in Blaenau Gwent, Ceredigion, Neath Port Talbot, Vale of Glamorgan and Swansea.
Anne Jones, Assistant Information Commissioner for Wales, said: "Keeping people's personal information secure should be hardwired into their culture as losses can seriously affect reputations and as a consequence, service delivery".
