Search

How can we help?

Icon

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The Information Commissioner’s Office (ICO) has recently prosecuted an employee who transferred information about his company’s clients before moving to a new job. The employee worked at a waste management company and, before leaving to work at a rival company, emailed the details of 957 clients to his personal email address. The documents contained commercially sensitive information, as well as personal information including the contact details of customers and their purchase history.

The employee pleaded guilty to the offence of unlawfully obtaining data and was fined £300, ordered to pay £405.98 costs and a £30 victim surcharge. This follows on from a similar case in April 2016 where a former employee of the insurance company LV= was also fined £330 for attempting to get an existing employee to sell customer data to him.

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

Chambers and Partners

The Clarkslegal team are commercial and good to work with. They get what our business needs and tell me what I need to hear.

The Courts are currently limited to imposing a fine for these offences (albeit the fine is unlimited). Although the Criminal Justice and Immigration Act 2008 makes unlawfully obtaining personal data punishable by up to 2 years in prison, this is yet to be enacted and it is not known when this will come into force. Earlier this year, the ICO called for tougher sentencing powers for people convicted of stealing personal data but, for the time being, it seems that the ICO is following through in its warning that “anyone who tries to unlawfully obtain, disclose or sell personal data should expect to see themselves hauled before the courts”.

Employmentbuddy.com 

About this article

Disclaimer

This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

About this article

Read, listen and watch our latest insights

art
  • 18 June 2025
  • Employment

Pride Month: How Can You Celebrate as an Employer

The UK held its first Pride Parade in 1972, inspired by events held in major American cities following the Stonewall rebellion in New York in June 1969.

Pub
  • 16 June 2025
  • Privacy and Data Protection

WhatsApp in the workplace: Is it legally safe?

In this podcast, Lucy White and Monica Mastropasqua, members of the Data Protection team at Clarkslegal, will address frequently asked questions from clients regarding the use of WhatsApp at work.

art
  • 13 June 2025
  • Employment

Human Resources – A Shift Towards artificial intelligence?

On 6 May 2025, the SRA authorised the first law firm providing legal services through artificial intelligence. Garfield.Law will provide an AI-powered tool which can assist businesses with the small claims court process, to aid in recovering unpaid debts.

art
  • 11 June 2025
  • Employment

Employment Contracts and Specific Performance

‘Specific performance’ is a type of equitable remedy available, in some circumstances, and at the court’s discretion, for breach of contract; it entails an order by the court which legally compels a party to a contract to fulfil its contractual obligations.

art
  • 10 June 2025
  • Commercial Real Estate

Taking a commercial lease: The main points to negotiate when agreeing the Heads of Terms

What are the key areas tenants may want to pay particular attention to when agreeing to the Heads of Terms (HoTs).

art
  • 09 June 2025
  • Employment

Clarkslegal representing UK employers at the International Labour Conference

I am writing this from Geneva, where I once again have the honour of attending the International Labour Organisation’s International Labour Conference.