ICO to investigate alleged Essex council data lapse

The Information Commissioner's Office is making enquiries into an alleged data breach which may involve 400 users of services provided by Essex county council. A spokesman for the ICO said: "We will be making enquiries into the circumstances of the alleged breach of the Data Protection Act before deciding what action, if any, needs to be taken." Essex council said it is conducting its own investigation into an information security breach. The council's investigation is centred on a former employee who had breached its information security policy. "Whilst the ex-employee had signed a declaration stating they had deleted the information and not shared it with anyone, it is our duty to inform service users that their information has been compromised," the council said in a statement. "We do not believe there is malicious intent behind the incorrect use of data and the information involved is such that identity theft is minimal. However, we are asking those affected to be extra vigilant." The council said it was unable to give specific details of the alleged breach at this stage, but the Total Essex website has reported that it occurred when "names, addresses and financial information about people in 'substantial' and 'critical' need of care were sent from the adults health and community wellbeing department to a computer outside of county hall". This article is published by Guardian Professional . Join the Guardian Government Computing Network free to receive regular emails on the issues at the top of the professional agenda.