Reporting sharing security incidents

Devon County Council takes information security seriously and makes every effort to protect the personal information is holds from accidental loss, theft and unauthorised access. However, where an incident does occur, it’s important we respond appropriately to reduce the ongoing risk.

Security incidents could include any of the following:

  • Information received by someone who was not entitled to it, for example by phone, email, letter, fax or in a face to face scenario.
  • Loss or theft of paper files or documents
  • Loss or theft of equipment – such as mobile phones or laptops

Where you believe any of the above has taken place, please report the incident using the appropriate process below.

Reporting an incident as a DCC staff member

If you become aware of an incident or suspect one may have occurred, follow the steps outlined in our Information Security Incident Guidance. Complete the Security Incident Reporting Form and return by email.

Reporting an incident as a member of the public

If you find personal information or equipment; receive personal information where you are not the correct recipient or suspect someone is accessing or sharing information deliberately with someone who is not entitled to the information, please notify the Information Governance Team by emailing us or calling 0845 155 1015.

What happens next?

Once you have reported the incident, the Information Governance Team will carry out an investigation, and will seek where appropriate to, rectify the incident, recover any data where possible and will look to put in place steps to help prevent a similar incident from occurring again.