Personal data security breach management in the public sector

Resource type: Practice note

Status: Maintained

Jurisdictions: England, Wales

This practice note considers UK data protection laws and guidance on personal data security breach management in the public sector.

Kirsten Whitfield, Wragge & Co and PLC Public Sector

Not logged in

The full text of this resource is available through the following PLC services:

PLC Commercial
PLC Public Sector
PLC IPIT & Communications

To request a free trial or for further information, please fill in the trial request form, contact your account manager, or contact the PLC Helpline.

Subscriber log in

Subscription help

If you are having difficulty accessing the content you require, please visit our help and information page, or contact the PLC Helpline.

Actions

Resource information

Show resource details Hide resource details

Resource ID: 0-383-9963
Products: PLC Commercial, PLC IPIT & Communications, PLC Public Sector
This resource is maintained, meaning that we monitor developments on a regular basis and update it as soon as possible.

Contact the team

Related content

Topics

Data protectionData protection (http://uk.practicallaw.com/topic8-103-1271)
Information technologyInformation technology (http://uk.practicallaw.com/topic5-103-2074)
PrivacyPrivacy (http://uk.practicallaw.com/topic6-383-8687)

Topics from other jurisdictions

Public sectorPublic sector (http://uk.practicallaw.com/topic6-384-0911)

Practice note: overview

Overview of UK data protection regime Overview of UK data protection regime (http://www.practicallaw.com/topic7-107-4765)

Practice notes

Confidentiality during employment and after termination Confidentiality during employment and after termination (http://www.practicallaw.com/topic8-201-8805)
Data sharing and data security Data sharing and data security (http://www.practicallaw.com/topic8-384-0929)
Public procurement of ICT Public procurement of ICT (http://www.practicallaw.com/topic3-376-3565)
Regulatory Enforcement and Sanctions Act 2008: civil sanctions Regulatory Enforcement and Sanctions Act 2008: civil sanctions (http://www.practicallaw.com/topic5-379-1384)

Standard documents

Data protection policy Data protection policy (http://www.practicallaw.com/topic9-379-8623)
Electronic information and communications systems policy Electronic information and communications systems policy (http://www.practicallaw.com/topic9-200-3691)

Standard clauses

Data processing clauses (pro-customer) Data processing clauses (pro-customer) (http://www.practicallaw.com/topic3-210-4966)
Data processing clauses (pro-processor) Data processing clauses (pro-processor) (http://www.practicallaw.com/topic0-239-2968)

Checklist

Personal data security breach management: checklist Personal data security breach management: checklist (http://www.practicallaw.com/topic0-383-9996)

Legal update: archive

ContactPoint database gets go ahead ContactPoint database gets go ahead (http://www.practicallaw.com/topic5-384-8795)
DoH publishes checklist for reporting, managing and investigating incidents where personal data has been lost DoH publishes checklist for reporting, managing and investigating incidents where personal data has been lost (http://www.practicallaw.com/topic2-501-3379)
Government publishes final report on data-handling procedures Government publishes final report on data-handling procedures (http://www.practicallaw.com/topic7-382-2723)
ICO takes enforcement action against East Cheshire NHS Trust ICO takes enforcement action against East Cheshire NHS Trust (http://www.practicallaw.com/topic4-422-1821)
ICO warns NHS bodies to protect patient records ICO warns NHS bodies to protect patient records (http://www.practicallaw.com/topic5-385-9091)

External resources

Civil Service Management Code Civil Service Management Code (http://www.practicallaw.com/topic0-383-9473)
Cross Government Actions: Mandatory Minimum Measures Cross Government Actions: Mandatory Minimum Measures (http://www.practicallaw.com/topic4-383-9923)
Data Handling Procedures in Government: Final Report (June 2008) Data Handling Procedures in Government: Final Report (June 2008) (http://www.practicallaw.com/topic0-383-9920)
Data Handling Procedures in Government: Interim Progress Report (December 2007) Data Handling Procedures in Government: Interim Progress Report (December 2007) (http://www.practicallaw.com/topic7-383-9926)
Data Protection Good Practice Note: Data sharing between different local authority departments Data Protection Good Practice Note: Data sharing between different local authority departments (http://www.practicallaw.com/topic5-383-9927)
Data Protection Good Practice Note: Security of personal information Data Protection Good Practice Note: Security of personal information (http://www.practicallaw.com/topic8-383-9902)
Guidance on data security breach management Guidance on data security breach management (http://www.practicallaw.com/topic4-383-9918)
ICO Information note 08/08 ICO Information note 08/08 (http://www.practicallaw.com/topic6-383-9922)
ICO: Our approach to encryption ICO: Our approach to encryption (http://www.practicallaw.com/topic4-384-2124)
Local Government Association (LGA) Local Government Association (LGA) (http://www.practicallaw.com/topic4-204-7956)
NHS Confidentiality Code of Practice NHS Confidentiality Code of Practice (http://www.practicallaw.com/topic8-383-9921)
Partnerships UK (PUK) Partnerships UK (PUK) (http://www.practicallaw.com/topic1-381-9498)
Privacy Impact Assessment handbook Privacy Impact Assessment handbook (http://www.practicallaw.com/topic2-383-9924)

Legislation

Data Protection Act 1998 Data Protection Act 1998 (http://www.practicallaw.com/topic9-383-2556)