P2011-ND-036

Since June 2011, GIC has been upgrading its client management computer system. Despite its policies and safeguarding measures, on September 24, 2011, a long-term and valued employee saved client personal information onto a USB memory stick to do some work outside of the office. The data on the memory stick was not encrypted. The employee intended to assist the organization through working from home. Unfortunately, sometime between September 24 and 25, 2011, the employee lost the memory stick.