Lost or stolen devices and data

Information Standards Freedom of Information Response

Our Ref: FoI 22-19

03rd October 2019

Freedom of Information Act 2000

I can confirm that the Northern Ireland Assembly Commission holds some information relevant to your request of 12th September 2019. In your request, you asked for the following information:

"I would like to submit the following FOI Request to your organisation.

Please do let me know if you have any questions on the following request:

1. How many employee devices that can store data (such as devices including smartphones, laptops, PDAs, external storage devices [hard drives, memory cards, CDs and DVDs] and tablets) were lost or stolen between 1st June 2018 and 1st June 2019?

a. Of these devices, if available, how many were lost and how many were stolen?

b. Of these devices, if available, how many were recovered after they were lost or stolen?

There were no instances of employees losing or having their devices stolen that can store data between the period 01st June 2018 and 1st June 2019.

2. Where were devices lost or stolen?

a. At work?

b. At home?

c. During the commute between home and work

d. During business travel – e.g. to another region or country?

e. Other – e.g. out-of-work activity?

3. Of the devices that were lost or stolen, how many were

a. Encrypted (i.e. the data was protected by either manufacturer provided encryption or third-party encryption)?

b. b. Not encrypted?

4. Following the loss or theft of a device, how many employees were: disciplined, sent on training course, reminded of security practices?

As there were no incidents of employees losing or having their devices stolen that can store data, the Northern Ireland Assembly does not hold this information.

5. When was your last audit by the Information Commissioners Office?"

No information is held by the Northern Ireland Assembly Commission regarding an audit by the Information Commissioner's Office

If you feel that the information we have provided does not meet your request fully, please contact this office as soon as possible. You have the right to request a formal review by the Northern Ireland Assembly Commission and if you wish to do so, please write to me at the above address.

If after such an internal review you are still unhappy with the response, you have the right to appeal to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF who will undertake an independent review.

If you have any queries about this letter, please contact me. Please remember to quote the reference number above.

Yours sincerely

Information Standards and Data Protection Officer