If you haven’t read the recent reports on the root causes of government data loss and you deal with personal data at your institution then you really should. They highlight that whilst the technology was adequate for the job both the training, culture and process were far from adequate. If you only read one report, though, then this should be it. The data handling review gives some good pointers on how process, training and cultural adptation are vital to ensure that personal data is handled sensitively and appropriately. It’s a message we relayed through the Identity Project and as we store more and more personal data about staff and students then we need to have measures in place to ensure that everyone who deals with it knows how they should be handling the data so that the end user gets the experience they deserve and can be secure in the knowledge that their identity is safe.