The personal data held by local authorities for over 3.5m people in the UK is not protected by a Disaster Recovery (DR) plan. The lack of a DR plan could mean that should councils be affected by a cyber attack, equipment failure or human error, personal data could be permanently lost or fall into criminal hands. Despite previous examples of public sector data loss, over 50% of councils will make no further investment in disaster recovery this year 4% will decrease. Despite this, nearly two-thirds of councils (63%) have a minimum target time in which to recover lost data.”]