The employee is being charged under the least sensitive clause 8.1 of the act which deals with safeguarding information, as there is no suggestion of criminal intent.

The official in question is not likely to get a custodial sentence but it is clear that the authorities want to make it very clear that there have been enough breaches in security and they they will prosecute.

What does this mean for those working in the public sector who deal daily with sensitive data?

At a guess it means that organisations should invest in understanding their business needs, modeling their security protocols around them and making sure people understand the issues by training them.

From time to time accidents will happen so should it be possible for such documents to be taken on to the street? Would electronic facsimiles be a better option where encryption and passwording could have prevented anyone (other than those authorised to do so) to view the documents?

What have we learned from all this (again!)?.... Review systems and protocols, and if the risks out-way the business need... don't do it!