In May 2007, Pearson Driving Assessments Limited (part of the Pearson group of companies), a private contractor to the Driving Standards Agency, advised that a hard disk drive had gone missing from Pearson’s secure facility in America where Pearson processes information relating to the driving theory test. The hard disk drive contained the records of candidates for the driving theory test from September 2004 until April 2007.

The theory test records contained on the hard disk drive were: the name of theory test applicants; their postal address; their telephone number; the test fee paid; their theory test centre; a code indicating how the test was paid for; and, where provided, an email address. The drive did not contain details of any individual’s bank account or credit card. It did not contain their driving licence number, nor their National Insurance Number. It did not contain their date of birth, nor a copy of their signature, and it did not contain the result of their test.

Pearson has informed the Agency that the hard disk drive was formatted "specifically to fit Pearson configuration and as such is not readily usable and/or accessible for third parties". Pearson has also confirmed that there is no external indication of the drive’s contents.

The DSA have said that they apologise unreservedly to customers for the uncertainty and concern they may have. They say that Pearson are issuing their own apology.

The Information Commissioner advised on 14 December that he is concerned about any security breach – especially where large numbers of individuals are concerned. However, he recognises that the risks are lower where the personal data does not include banking or credit card details and where security safeguards were in place to protect the data from third party access. He has also indicated that this case does not appear to present a substantial risk to large numbers of individuals.