The advice we give from Secure Data Recycling is :-

Store paper files and removable storage devices (such as USB drives and CDs) containing sensitive information in a locked drawer, cabinet, safe or other secure container when not in use.

Restrict access to sensitive data to those who have a need to know. Give employees access to only the information they need to do their jobs – whether it’s online or in paper form.

Make sure that all paper no longer required is “Shredded” by an accredited company such as Secure data Recycling

Make sure all unwanted memory devices and hard drives are wiped or destroyed by a company such as Secure Data Recycling

All obvious, maybe but just have a look around your workplace!

Take data theft seriously!