The UK Information Commissioner's Office says that the British Council's loss of an unencrypted disk containing personally identifiable information constitutes a breach of the Data Protection Act. The disk holds sensitive data belonging to more than 2,000 staff members. The breach was reported to the ICO promptly; the ICO has required the British Council to officially agree to a number of security measures to guard against future data loss. Among those measures are ensuring that all portable and mobile data storage devices are encrypted.
-http://www.computing.co.uk/computing/news/2240575/british-council-breacheds
-http://www.theregister.co.uk/2009/04/20/british_council_data_loss/