Loss of Parcel/Missing Document Enclosed Label

[Sparetoolparts]

Hi All

I've been thinking about data breaches and was wondering where would I stand if a parcel was lost in the post by say Royal Mail or another courier or the document enclosed label went missing/fell out for example.

Does this constitute a data breech and if so should I notify the ICO?

 

[Simon Plummer]

Hiya,

Yes 'strictly speaking' this is a breach, however in the event of a breach you have to assess it.

Basically, if it is large scale or sensitive information (health records etc) you report it. In this instance, a single data subject and limited information (that is probably public anyway) wouldn't result in 'a risk to the rights and freedoms of natural persons' so wouldn't need reporting. What i would recommend though is just recording it so you have evidence that you were aware, you assessed it and felt no need to report it - just covers bases.

See this...

"In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay."

Hope this helps

 

[JEREMY HAWKE]

If you dont stick the label on properly dont blame the courier
Im fed up with you lot on here blaming me everytime something goes wrong

 

[Keith Budden]

Technically - yes it's a data breach. Just keep a record in your data breach register.