As we've already seen, human error is the number one cause of data loss and data breach. In this section we're going to follow Harrison from IRC Limited again and see what we can learn from his attitude to data security.
Data security is everyone's responsibility. It only takes one weak link to break the chain. Other people's data is valuable so treat it with care.
The temptation in the search and recruitment sector is to leave your role with some data up your sleeve. When you've spent years building up your network it's frustrating not to have access to that.
Let's see what happens when a new recruit joins Harrison at IRC Limited.
In October 2017 Daniel Short, a consultant working at recruitment agency VetPro, left his job and set up a new company Vet Select. When he left he took 272 CVs with him.
Mr Short, who took the CVs, received a fine and a criminal conviction as this was willful theft of personal data. This occurred before the GDPR came into force. If it happened today the fine would be much greater.
The ICO said "Short thought he could get away with stealing from his old employer to launch his own company. Data Protection laws are there for a reason and the ICO will continue to take action against those who abuse their position."
Your business has invested a lot of time and effort into preparing for the GDPR. They've already put in place policies and processes to protect the data that belongs to clients, candidates and you, but that won't count for much unless everyone recognises their responsibilities and the risks they pose.