I am currently covering a role and have been asked to clarify issues around data protection of some information pertaining to a group of volunteers. The records I have, contain personal data as well as identification and CRB checks. At present this information is filed in the shared office although not locked away. My employer has stated that as the records are kept in a lockable office on a secure floor of this building then this is sufficient. My concern remains though that identification and personal details are still potentially available to staff in the office that do not need access to it. Should I pursue having the information locked in a filing cabinet?

In addition to this the organisation has already lost personal details – application forms etc prior to my arrival. I have reported this (one of the application forms was mine!) but as yet not had a response.

Many thanks for taking the time to read this.