Search

How can we help?

Icon

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The Information Commissioner’s Office (ICO) has recently prosecuted an employee who transferred information about his company’s clients before moving to a new job. The employee worked at a waste management company and, before leaving to work at a rival company, emailed the details of 957 clients to his personal email address. The documents contained commercially sensitive information, as well as personal information including the contact details of customers and their purchase history.

The employee pleaded guilty to the offence of unlawfully obtaining data and was fined £300, ordered to pay £405.98 costs and a £30 victim surcharge. This follows on from a similar case in April 2016 where a former employee of the insurance company LV= was also fined £330 for attempting to get an existing employee to sell customer data to him.

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

Chambers and Partners

The Clarkslegal team are commercial and good to work with. They get what our business needs and tell me what I need to hear.

The Courts are currently limited to imposing a fine for these offences (albeit the fine is unlimited). Although the Criminal Justice and Immigration Act 2008 makes unlawfully obtaining personal data punishable by up to 2 years in prison, this is yet to be enacted and it is not known when this will come into force. Earlier this year, the ICO called for tougher sentencing powers for people convicted of stealing personal data but, for the time being, it seems that the ICO is following through in its warning that “anyone who tries to unlawfully obtain, disclose or sell personal data should expect to see themselves hauled before the courts”.

Employmentbuddy.com 

About this article

Disclaimer

This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

About this article

Read, listen and watch our latest insights

Pub
  • 07 February 2025
  • Corporate and M&A

Talk & Golf : Thinking of Exiting your Business?

Join Stuart Mullins, Partner at Clarkslegal, and Nicky Goringe Larkin, Managing Director at Succession Planning, for a morning breakfast talk on preparing your business for exit, followed by a round of golf at the Eyston Course at Caversham Golf Club.

art
  • 06 February 2025
  • Privacy and Data Protection

Cookies and Consent: the ICO’s Cookie Review

In the digital age, cookies play a crucial role in how websites operate and interact with users.

art
  • 05 February 2025
  • Corporate and M&A

Growing Pains for Businesses

This thought piece considers some of the key issues and pain points facing a business planning to scale up

art
  • 03 February 2025
  • Employment

Indirect discrimination: How mandated office returns could discriminate against working mothers

In this article though, we will focus on one of the biggest potential hurdles, and the one that is garnering the most media attention and the most criticism. Is a return to work policy discriminatory on grounds of sex?

art
  • 24 January 2025
  • Privacy and Data Protection

UK Data Protection: A look back at 2024 and what to expect in 2025

On 15 January 2025, Louise Keenan and Shauna Jones hosted our webinar “UK Data Protection: what happened in 2024 and what’s in store for 2025.” Our webinar is available for you to watch, but in this article, we will provide a brief summary of what was discussed.

art
  • 22 January 2025
  • Corporate and M&A

Deal Announcement: Clarkslegal’s Corporate team advise founder on exit from Bristol based hospitality business

Clarkslegal is pleased to have advised the exiting shareholder and director of a hospitality business in the South West on the sale of their shareholding and termination of their employment.