Log In

Reset Password
BERMUDA | RSS PODCAST

HSBC is fined record $5.2m

LONDON (AP) — Britain's financial regulator said yesterday it has fined three units of HSBC Group £3.185 million ($5.2 million) for failing to protect consumer data from loss or theft.

The Financial Services Authority said HSBC Life UK Ltd. was fined £1.61 million, HSBC Actuaries and Consultants Ltd. was fined £875,000 and HSBC Insurance Brokers Ltd. was fined £700,000.

HSBC said that no clients had reported losses as a result of these failures.

All three firms had been warned by HSBC Group Insurance's compliance team about the need for robust data security controls in July 2007, but in February 2008 an unencrypted CD containing the details of 180,000 policy holders was lost in the post, the FSA said.

It said it found that large amounts of unencrypted customer data had been sent by post or courier to third parties.

Confidential information about customers was left on open shelves or in unlocked cabinets, and staff were not given sufficient training on identifying and managing risks like identity theft, the regulator said.

"All three firms failed their customers by being careless with personal details which could have ended up in the hands of criminals," said Margaret Cole, the agency's director of enforcement.

"It is also worrying that increasing awareness around the importance of keeping personal information safe and the dangers of fraud did not prompt the firms to do more to protect their customers' details."

The largest previous fine for data protection failures was the £1.26 million assessed against Norwich Union, the agency said.

HSBC said it had contacted customers who were potentially affected, and said 33,500 employees had received data protection training.

"We hold ourselves to the highest standards, but it is clear that in these instances we have fallen short, which we sincerely regret," said Clive Bannister, group managing director of HSBC Insurance.

"While this is a serious matter, no customer reported any loss from these failures and we are doing everything possible to prevent a recurrence," Bannister said.