Here we go again, personal data set free

There's another story out there today about personal data finding it's way out of the building.  According to a story in today's San Jose Mercury News, Home Depot is reporting that a laptop containing data on some 10,000 employees was taken from a car.  The story doesn't indicate who was responsible or what department they worked in, not that it matters at this point.

The sad truth is that once again, someone ignored the rules and had removed the data from the office.  That they left the laptop in the car and, for whatever reason, didn't take appropriate steps to secure the car shows that procedures alone don't work.  People need to be taught that the rules are there for a reason. 

This is not the only data security breach that has hit the papers this year.  A few months ago the Gap announced that data on roughly 800,000 job applicants  left the building as a result of a vendor's inability to protect it.  San Jose Mercury News, 9/28/07. 

So, as a result of bad thinking, personal data is now floating about the streets.  People who thought their employer was concerned about identify theft are left out in the open.  Job applicants, who are required to list quite a bit of sensitive information on an application, are out in the open.

I believe that the organizations have a social responsibility to protect this data and should be called to task when they screw up.  No, don't tell me that it's the fault of an individual employee because they didn't abide by the rules;  the company is responsible and liable.  People put their faith in the company's hands when they supply this information.

As for me, in the future I will not be going to any of the stores involved.  I figure that if they can't take care of their people any better than that, they don't need my business.