The ICO has ordered the Isle of Scilly Council to implement new data protection procedures after two security breaches were discovered. An investigation revealed that council employees had lost paper documents containing sensitive personal data and inadvertently added a document attachment to an email, resulting in details of ongoing disciplinary action against a head teacher coming into the public domain.

ICO news release – 9 September 2014