Insecure data transfer requests from organisations that should know better

[paulkerton]

So I thought I'd put this thread up as an investigation of how poor people are handling data at the moment.

 

1. One SCB who asked schools to password protect .DOC (not .DOCX) files with LAESTAB code of the school in order to send them referrals.

2. One SCB (not the one above) who asked school to fill in a spreadsheet of excluded children and email it back.

 

Anyone else seen shocking examples of this kind of lax behaviour from people and organisations who should know better?

[Areku]

yup daily, usually other schools.

we once had a feeder establishment, hand all of their student transfer files, to a random person in our car park.

when our admin team chased them to see why they had not received them, it was discovered that the random person had then handed them to a teacher, who had dropped them into the heads office.

We then contacted the other establishment to let them know what they had done.... they didn't really care.

 

we got the files, but it could have so easily been worse, our admin team where completely horrified that another education establishment did this.