Procedures for handling sensitive data at HM Revenue and Customs are "woefully inadequate", an inquiry has revealed.
Staff worked on confidential data without adequate support, training or guidance with a "muddle through" ethos, investigators found.
The findings were contained in an Independent Police Complaints Commission (IPCC) report into the loss of CDs holding the personal records of 25 million people.
Investigators said no individuals were to blame for the security breach that took place when the CDs were lost in internal post.
Instead the Government agency was accused of wholesale failings in "institutional practices and procedures" concerning data.
Officials were so ignorant about data security that when the CDs were lost, they simply sent another set from their Tyne and Wear offices.
It was three weeks before an employee reported the loss, setting in motion a chain of events that led to a national outcry.
The CDs contained a complete record of ... OOPS !!!
Tags: