Nationwide fined £980,000 for information security lapses
LONDON - The UK Financial Services Authority (FSA) has fined Nationwide building society £980,000, for failing to have effective systems and controls in place to manage its information security risks.
Following the theft of a laptop computer from a Nationwide employee's home last year, the FSA launched an investigation into the building society's information security procedures, and found them to be inadequate, potentially exposing customers to an increased risk of financial crime. More worryingly, the FSA investigation discovered Nationwide was not aware the laptop contained confidential customer information, and that the building society did not start an investigation until three weeks after the theft.
"Nationwide is the UK's largest building society and holds confidential information for more than 11 million customers," says Margaret Cole, director of enforcement at the FSA. "Nationwide's customers were entitled to rely on it to take reasonable steps to make sure their personal information was secure. Firms' internal controls are fundamental in ensuring customers' details remain as secure as they can be and, as technology evolves, they must keep their systems and controls up-to-date to prevent lapses in security. The FSA took swift enforcement action in this case to send a clear, strong message to all firms about the importance of information security."
Nationwide co-operated fully with the FSA and by agreeing to settle at an early stage, it qualified for a 30% discount, without which the fine would have been £1.4 million.
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
More on Regulation
Prop shops recoil from EU’s ‘ill-fitting’ capital regime
Large proprietary trading firms complain they are subject to hand-me-down rules originally designed for banks
Revealed: the three EU banks applying for IMA approval
BNP Paribas, Deutsche Bank and Intesa Sanpaolo ask ECB to use internal models for FRTB
FCA presses UK non-banks to put their affairs in order
Greater scrutiny of wind-down plans by regulator could alter capital and liquidity requirements
Industry calls for major rethink of Basel III rules
Isda AGM: Divergence on implementation suggests rules could be flawed, bankers say
Saudi Arabia poised to become clean netting jurisdiction
Isda AGM: Netting regulation awaiting final approvals from regulators
Japanese megabanks shun internal models as FRTB bites
Isda AGM: All in-scope banks opt for standardised approach to market risk; Nomura eyes IMA in 2025
CFTC chair backs easing of G-Sib surcharge in Basel endgame
Isda AGM: Fed’s proposed surcharge changes could hike client clearing cost by 80%
UK investment firms feeling the heat on prudential rules
Signs firms are falling behind FCA’s expectations on wind-down and liquidity risk management