Solicitor lost unencrypted USB stick full of client information


USB stick: Solicitor did not realise it was lost

A solicitor who lost an unencrypted USB stick full of client information that was subsequently found by a member of the public has been rebuked by the Solicitors Regulation Authority (SRA).

The storage device contained approximately 1,400 documents created over three and a half years, featuring confidential information about clients and former clients, including details of minors and of clients’ criminal convictions.

According to the Solicitors Regulation Authority (SRA), Lucy Crossman was on furlough at the time from North-West criminal defence firm Walsh Solicitors, where she worked between October 2016 and April 2021.

The USB stick was found by a member of the public on 3 July 2020, although the notice published by the regulator does not say where.

This person accessed it and found reference to another firm of solicitors, which they contacted and sent the device. The firm reported the matter to the SRA.

Ms Crossman admitted breaching the rules by failing to safeguard confidential client information.

The SRA said the solicitor “has admitted her conduct in full and shown insight”. She told the regulator that she failed to realise the USB device was lost as she was on furlough at the time.

In deciding a written rebuke was the appropriate outcome, the SRA said Ms Crossman’s conduct was “reckless as to the risk of harm and her regulatory obligations”, but there was a low risk of repetition.

“The level and nature of breach is such that some public sanction is warranted to uphold public confidence in the delivery of legal services,” it added.

Ms Crossman also agreed to pay costs of £300.




Leave a Comment

By clicking Submit you consent to Legal Futures storing your personal data and confirm you have read our Privacy Policy and section 5 of our Terms & Conditions which deals with user-generated content. All comments will be moderated before posting.

Required fields are marked *
Email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog


Keeping the conversation going beyond Pride Month

As I reflect on all the celebrations of Pride Month 2024, I ask myself why there remains hesitancy amongst LGBTQ+ staff members about when it comes to being open about their identity in the workplace.


Third-party managed accounts: Your key questions answered

The Solicitors Regulation Authority has given strong indications that it is headed towards greater restrictions on law firms when it comes to handling client money.


Understanding vicarious trauma in the legal workplace

Vicarious trauma can happen to anyone who works with clients who have experienced trauma such as domestic or other violence, child abuse, sexual assault, torture or being a refugee.


Loading animation