An undertaking to comply with the seventh data protection principle has been signed by Dudley Metropolitan Borough Council. This follows an investigation whereby a social worker had left a case file containing sensitive personal data at a client-™s home. The case file outlined child welfare concerns and disclosed the identity of the source.