Did you see the recent story about the Canadian Imperial Bank of Commerce losing a file that includes the confidential details of 470,000 current and former clients of Talvest Mutual Funds? This is not that unusual but it reminded me of one of my favorite non-compliance stories... 

Since 2001 CIBC have been sending faxes containing confidential information to a scap yard in West Virginia. 

http://www.theglobeandmail.com/servlet/story/RTGAM.20041126.wxcibc1126/BNStory/Business/

Feel free to read the entire story but pay special attention to these 2 gems...

[the owner] said that in an effort to get the bank to [stop sending the faxes], he telephoned some of the CIBC customers in 2002 to inform them that the bank was transmitting their personal and financial information to him.

"They were not real happy. When we started reading off the information that we had — your social security number, your bank account number, your telephone number, all the information — they were real unhappy about it," [the owner] said.

and...

But after CIBC told him that it was not responsible for the deluge, [the owner] said, he started saving the faxed documents in order to prove his point.

The sensitive information now sits in a locked file cabinet in a building, guarded by his junkyard rottweiler.