Search

How can we help?

Icon

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The Information Commissioner’s Office (ICO) has recently prosecuted an employee who transferred information about his company’s clients before moving to a new job. The employee worked at a waste management company and, before leaving to work at a rival company, emailed the details of 957 clients to his personal email address. The documents contained commercially sensitive information, as well as personal information including the contact details of customers and their purchase history.

The employee pleaded guilty to the offence of unlawfully obtaining data and was fined £300, ordered to pay £405.98 costs and a £30 victim surcharge. This follows on from a similar case in April 2016 where a former employee of the insurance company LV= was also fined £330 for attempting to get an existing employee to sell customer data to him.

Chambers and Partners

The Clarkslegal team are commercial and good to work with. They get what our business needs and tell me what I need to hear.

The Courts are currently limited to imposing a fine for these offences (albeit the fine is unlimited). Although the Criminal Justice and Immigration Act 2008 makes unlawfully obtaining personal data punishable by up to 2 years in prison, this is yet to be enacted and it is not known when this will come into force. Earlier this year, the ICO called for tougher sentencing powers for people convicted of stealing personal data but, for the time being, it seems that the ICO is following through in its warning that “anyone who tries to unlawfully obtain, disclose or sell personal data should expect to see themselves hauled before the courts”.

Employmentbuddy.com 

Disclaimer

This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

About this article

Read, listen and watch our latest insights

art
  • 15 September 2025
  • Immigration

Sharp rise in Sponsor Licence Revocations – What employers need to know

The Home Office has reported a record number of sponsor licence revocations over the past year, as part of its intensified efforts to crack down on abuse of the UK’s immigration system.

art
  • 10 September 2025
  • Commercial Real Estate

Trouble at the Table: The Challenges Facing the UK Hospitality Sector in the run up to Christmas 2025

The UK hospitality sector, long celebrated for its vibrancy and resilience, is facing a perfect storm of economic, operational, and structural challenges in 2025.

art
  • 09 September 2025
  • Commercial Real Estate

Le bail commercial anglais: quelques points essentiels à considérer

Typiquement, les baux commerciaux en Angleterre sont de court terme, d’une durée de 5 ou 10 ans, avec un loyer de marché et des ajustements du loyer périodiques en fonction de l’inflation ou d’autres facteurs. 

art
  • 09 September 2025
  • Corporate and M&A

The Failure to Prevent Fraud Offence – be prepared to avoid criminal liability

The failure to prevent fraud offence is a new corporate offence which has come into force on 1 September 2025.

art
  • 08 September 2025
  • Employment

Can employers still make changes to contracts after the Employment Rights Bill?

The short answer is yes but it will be much more difficult for employers following the introduction of the Employment Rights Bill because their ability to fairly dismiss employees who do not agree contractual changes is being restricted. 

art
  • 05 September 2025
  • Privacy and Data Protection

When Ignoring a DSAR Becomes a Criminal Offence

On 3 September 2025, Mr Jason Blake appeared at Beverley Magistrates Court and was fined for failing to respond to a data subject access request (DSAR).