Housing association reprimanded after residents’ data compromised

18 April 2024, 13:24

Person using laptop
Person using laptop. Picture: PA

A Clyde Valley Housing Association computer system enabled residents to access each other’s personal data.

A housing association has received an official reprimand after a new computer system enabled residents to access each other’s personal data.

Clyde Valley Housing Association received the reprimand from the Information Commissioner’s Office (ICO), the UK data protection regulator, following the launch of an online residents’ portal on July 14, 2022.

On the day the system went live, a resident contacted the housing association in Lanarkshire to say they were able to view other residents’ information, but the staff member who handled the call failed to escalate the matter.

The association eventually suspended access to the system on July 19 after receiving four further reports from other residents – meaning the personal information remained accessible for five days.

Jenny Brotchie, ICO Scotland regional manager, said: “While new digital products and services can improve the experience for customers, these must not come at the cost of the security of personal information.

“This breach was the result of a clear oversight by Clyde Valley Housing Association when preparing to launch its new customer portal.

“We expect all organisations to ensure they have appropriate security measures in place when launching new products and have tested them thoroughly with data protection in mind, as well as ensuring staff are appropriately trained.

“We will take action when people’s personal information is not protected.”

Eleven residents were found to have logged into the new system during the time it was live, and the housing association has contacted them to ask they do no share, copy, or make further use of the data.

The ICO recommended Clyde Valley Housing Association carries out rigorous testing on data protection before similar systems are rolled out in future.

It also recommended the association ensures its employees receive suitable data protection training.

Clyde Valley Housing Association has been contacted for comment.

By Press Association

More Technology News

See more More Technology News

There are calls for mobile phones to be totally banned for under 16s

Calls for mobile phones to be totally banned for under 16s

A young girl using a mobile phone (picture posed by model)

Next government should consider banning phones for under-16s, report says

Sir Chris Bryant

AI should be used to develop an app which detects skin cancer, Labour MP says

Handout image from Microsoft of its Copilot virtual assistant displayed on a laptop screen

Microsoft expanding Copilot AI assistant to organise meetings and support teams

Solar panels on a house roof

Octopus Energy launches ‘buy now, pay later’ for solar panels

Raspberry Pi

Raspberry Pi set for June IPO in welcome boost for London market

A person using a laptop

Nations agree to develop shared risk thresholds for AI as Seoul summit closes

Microsoft new equiment

Data regulator looking into Microsoft’s AI Recall feature

An easyJet plane

EasyJet uses AI to better manage flights from new control centre

Cabinet meeting

AI safety summits could help shape UK legislation, Technology Secretary says

Someone at a laptop

Safety institutes to form ‘international network’ to boost AI research and tests

Soldiers' boots

Army personnel feel ‘let down’ after MoD cyber attack

Person uses laptop

Global AI tech companies agree to set of safety outcomes in ‘world first’

AI safety summit

World leaders need to ‘get serious’ about AI, experts warn as summit opens

76th Cannes Film Festival

Scarlett Johansson: ChatGPT voice sounds ‘eerily similar’ to mine

UK’s economy

UK workers with AI skills get 14% wage premium, research suggests