Calendar An icon of a desk calendar. Cancel An icon of a circle with a diagonal line across. Caret An icon of a block arrow pointing to the right. Email An icon of a paper envelope. Facebook An icon of the Facebook "f" mark. Google An icon of the Google "G" mark. Linked In An icon of the Linked In "in" mark. Logout An icon representing logout. Profile An icon that resembles human head and shoulders. Telephone An icon of a traditional telephone receiver. Tick An icon of a tick mark. Is Public An icon of a human eye and eyelashes. Is Not Public An icon of a human eye and eyelashes with a diagonal line through it. Pause Icon A two-lined pause icon for stopping interactions. Quote Mark A opening quote mark. Quote Mark A closing quote mark. Arrow An icon of an arrow. Folder An icon of a paper folder. Breaking An icon of an exclamation mark on a circular background. Camera An icon of a digital camera. Caret An icon of a caret arrow. Clock An icon of a clock face. Close An icon of the an X shape. Close Icon An icon used to represent where to interact to collapse or dismiss a component Comment An icon of a speech bubble. Comments An icon of a speech bubble, denoting user comments. Comments An icon of a speech bubble, denoting user comments. Ellipsis An icon of 3 horizontal dots. Envelope An icon of a paper envelope. Facebook An icon of a facebook f logo. Camera An icon of a digital camera. Home An icon of a house. Instagram An icon of the Instagram logo. LinkedIn An icon of the LinkedIn logo. Magnifying Glass An icon of a magnifying glass. Search Icon A magnifying glass icon that is used to represent the function of searching. Menu An icon of 3 horizontal lines. Hamburger Menu Icon An icon used to represent a collapsed menu. Next An icon of an arrow pointing to the right. Notice An explanation mark centred inside a circle. Previous An icon of an arrow pointing to the left. Rating An icon of a star. Tag An icon of a tag. Twitter An icon of the Twitter logo. Video Camera An icon of a video camera shape. Speech Bubble Icon A icon displaying a speech bubble WhatsApp An icon of the WhatsApp logo. Information An icon of an information logo. Plus A mathematical 'plus' symbol. Duration An icon indicating Time. Success Tick An icon of a green tick. Success Tick Timeout An icon of a greyed out success tick. Loading Spinner An icon of a loading spinner. Facebook Messenger An icon of the facebook messenger app logo. Facebook An icon of a facebook f logo. Facebook Messenger An icon of the Twitter app logo. LinkedIn An icon of the LinkedIn logo. WhatsApp Messenger An icon of the Whatsapp messenger app logo. Email An icon of an mail envelope. Copy link A decentered black square over a white square.

Binned Highland Council social work papers spark major data breach probe

Items of litter which were scattered around on the ground near the bin area at Highland Council HQ in Inverness.
Items of litter which were scattered around on the ground near the bin area at Highland Council HQ in Inverness.

Highland Council is to report itself to the Information Commissioner after confidential documents about more than two dozen children were found by a member of the public.

An “urgent” investigation has been launched by Scotland’s largest local authority after the eight-page document was discovered among general waste outside its Inverness headquarters.

The document contains the full names, dates of birth and case numbers of 28 children – one as young as eight months old.

In one excerpt, an adoption case is discussed in some detail.

A council spokeswoman said: “The council is investigating this as a matter of urgency. We have been in touch with the Information Commissioner’s Office and will be reporting the breach to them in due course.

“We do have a policy on the destruction of confidential waste which is covered by our Information Security & Assurance policy.”

The confidential panel minutes were first discovered by a local resident whilst investigating concerns of fly-tipping in the area.

The papers, including sticky notes with details of queries to the council, were found on the ground and in ripped bin bags at the top of an open bin.

MSP Rhoda Grant condemned the situation as “inexcusable”.

She said: “Clearly this is a serious breach of confidentiality. The fact that these sensitive documents could have been accessed by the public is to, me, shocking and inexcusable. It brings into question, what training social work staff has had regarding confidentiality and GDPR.”

Council policy states that paper containing personal information must be “disposed of using the council’s confidential waste paper disposal bins or other approved method”.

Depute Provost of Inverness Bet McAllister said she had never seen a breach of this magnitude in her 12 years with the council.

She said: “I’m totally shocked. I am sitting here stunned; I can’t believe that. That’s really disappointing but I cannot understand how it’s happened.

“Obviously I am going to have to investigate this because that should never have happened and I will make damn sure that it never happens in the future. In the 12 years I have been on the council I have never ever heard of anything like that.”

Meanwhile, Caithness councillor Raymond Bremner was preparing to attend a meeting last night to discuss its underlying implications.

He added: “This raises multiple questions about the policies and procedures that the Highland Council has in place in respect of data protection.

“How can we be so inconsiderate in respect of the sensitivity and nature of the material that has been found? I would like to sincerely thank the person who has reported this matter and I will be raising it tonight with the Chief Executive Officer at a meeting I will be attending.

“We need to get to the bottom of this and ensure the persons responsible are held to account so that we never have an incident like this again.”

Senior councillor Allan Henderson said that the “system had gone wrong somewhere” before apologising to “anybody for any concern or hurt it has caused”.

An ICO spokeswoman said: “All organisations have the obligation to keep personal data secure, whether in electronic or paper format, particularly when sensitive data is involved. If anyone has concerns about how their data has been handled, they can report these concerns to the ICO and we can look into the details.”