Select a region
A Guernsey shop had to report itself to the ODPA for breaching data protection regulations after a staff member showed a member of the public CCTV footage from inside the store.
The shop itself was only alerted to this after Guernsey Police let bosses know.
As the footage showed customers inside the shop, showing the footage to other members of the public was not in accordance with the retailer's policy on CCTV use.
The Office for the Data Protection Authority said this incident demonstrates the importance of making sure that staff members only have access to the types of personal data needed to perform their duties because in most cases, not every member of staff requires access to all personal data processed.
The ODPA also said this incident further highlights the importance of having audit trails for instances where personal data is misused.
The incident was revealed as part of the authority's third quarter 'breach statistics'.
During July, August, and September this year there were a total of 40 reported personal data breaches, which is only one more than during the previous quarter.
These breaches affected 2,837 people, down from the previous quarterly figure of 14,019. However, twice as many people (517) were affected by ‘high risk’ breaches, said the ODPA.
General guidance on how to handle a data breach can be found at Handling Data Breaches · ODPA.
The next 'Breach Workshop' is being run by the ODPA on 5 December.
Comments
Comments on this story express the views of the commentator only, not Bailiwick Publishing. We are unable to guarantee the accuracy of any of those comments.