QUESTIONS have been asked over a recent data breach on Ceredigion County Council’s website.
At a meeting of the council’s audit committee, Cllr Gareth Davies asked what has been put in place to prevent a repeat of the recent issues.
Late last month documents containing people’s names, addresses and medical conditions were reported to the Information Commissioner’s Office as being publicly available on the council’s website.
The man who notified the council of the breach said he had reported the same data attached to cabinet papers in 2004 on the website in 2007.
Some of the documents included sensitive, personal data of Ceredigion residents.
The council also self-referred itself to the commissioner.
Cllr Davies said: “There’s been a recent breach where information hasn’t been as secure as it should be. Are we going to have a report on what measures are being put in place to ensure this doesn’t happen again?”
Committee vice-chairman Cllr Rowland Rees-Evans said there was likely to be discussed at the next meeting.
Councillors agreed that a report was also due on the whole information management department as it had not been on the agenda since 2016.
Comments: Our rules
We want our comments to be a lively and valuable part of our community - a place where readers can debate and engage with the most important local issues. The ability to comment on our stories is a privilege, not a right, however, and that privilege may be withdrawn if it is abused or misused.
Please report any comments that break our rules.
Read the rules hereLast Updated:
Report this comment Cancel