The Information Commissioner’s Office has published a report revealing that one in ten second-hand hard drives sold online contains personal data. The report is based on a “mystery shopper” exercise carried out by NCC Group on behalf of the ICO. The organisation sourced 200 hard drives from a mixture of internet auction sites and computer trade fairs. Four of the hard drives contained enough information for the ICO to identify the organisations they had originated from. The ICO is now investigating with those organisations how breaches happened and whether they have effective policies in place.”]