Nationwide Building Society has been fined £980,000 by the Financial Services Authority following the theft of a laptop containing details of nearly 11 million customers.
An official investigation following the loss discovered that Nationwide did not start its own investigation until three weeks after the event.
Jamie Cowper, EMEA marketing manager at data encryption firm PGP Corporation, said that the huge fine should serve as a warning to other companies not to play fast and loose with customer data.
He added that more must be done to protect customer information, particularly when it is stored on vulnerable portable devices such as laptops.
"The fact that Nationwide waited three weeks before even starting an investigation into the theft is a wake-up call to our culture of data complacency in the UK," said Cowper.
"The government should seriously consider adopting US-style data breach disclosure laws, where companies are compelled to act much sooner.
"And, of course, if more companies were using data security technologies such as encryption, laptop theft would quickly cease to be such a goldmine for criminals."
