Portsmouth City Council could face hefty fines under General Data Protection Regulations. It was discovered that for the past two years contractors have not been obliged to erase data when removing old computer drives. Auditors were unsure if any drives were affected due to council records that were deemed ‘not sufficient.’ The report also showed that £8,000 worth of council IT equipment was unaccountable.