In terms of client files in the office, files on desks, files in filing cabinets/in drawers, papers on desks....are these risks for a data breach? Whilst there aren't many random 'external' people working around the offices it can happen from time to time, such as cleaners (possibly out of hours), PAT testers, repairmen, decorators, or whosoever. If part of the office is sublet to a third party they could theoretically let themselves in at any hour and look at lots of client info should they wish to. Does this all mean a clear desk, locked cabinet, locked internal door policy at the end of the working day.....surely not?! Any thought. Thanks.