21 February 2005

Your first reaction to a USB memory stick may well be "small is beautiful", but there is a risk of it proving to be a wolf in sheep’s clothing.

We are currently experiencing an explosion in the market for small, portable devices for holding and transferring data and the USB memory stick is a prime example – a comparatively tiny device which can easily be plugged into a PC, data downloaded and then removed.
Great news for busy executives who want to transfer data, but equally good for employees who want to steal their employer’s confidential information. Camera phones also present an opportunity to photograph commercially sensitive information or product prototypes.

An added concern is if the data taken relates to a living individual, because the employer will be likely to have failed to take adequate steps to keep that personal data secure and be in breach of data protection legislation.

Given the advances in technology, employers should audit their data security measures and consider amending IT policies and employment contracts to address the new risks posed by devices such as camera phones and USB memory sticks.