Where most organisations have been caught out is in cases where confidential data about individuals has been copied onto portable media ??? USB sticks or other forms of removable drives, or portable devices such as laptops or smartphones ??? which are then lost or stolen.