From recent prosecutions it seems that the Information
Commissioner's Office (ICO) is a body to be taken seriously.
Not only has it continued to bring enforcement action against
organisations for data protection breaches, it also seems recently
to have ramped up prosecutions against individuals for unlawfully
obtaining client data.
A former waste disposal employee, Mr Lloyd, has been prosecuted
by the ICO under section 55 of the Data Protection Act 1998 for
transferring information about 957 clients of his employer, before
moving to a new job with a competitor. The information transferred
included personal data in the form of contact details and the
purchase history of customers.
Unlawfully obtaining or accessing personal data is a criminal
offence under section 55. The offence is punishable by way of a
fine. Mr Lloyd was fined £300, and ordered to pay a victim
surcharge of £30 and £405.98 in costs.
In April 2016, the ICO brought a similar prosecution against an
employee who had attempted to obtain personal data without the
consent of the data controller. At that time the ICO gave a warning
that "anyone who tried to unlawfully obtain, disclose or sell
personal data should expect to see themselves hauled before a
Whilst the fines issued to date have not been of high value, the
recent prosecutions are likely to be an indicator of things to come
and the threat of criminal sanctions could be an additional string
in an employer's bow when discouraging employees from misusing
the employer's information.
Further, although sanctions are currently limited to fines, the
ICO continues to call for more effective deterrent sentences,
including the threat of prison, to be available to the courts to
stop the unlawful use of personal information. These recent
prosecutions should be taken as a strong warning to employees to
think twice before taking commercially sensitive information
containing personal data to a new employer – the risks
aren't simply financial; they may end up facing a criminal
Dentons is the world's first polycentric global law firm. A
top 20 firm on the Acritas 2015 Global Elite Brand Index, the Firm
is committed to challenging the status quo in delivering consistent
and uncompromising quality and value in new and inventive ways.
Driven to provide clients a competitive edge, and connected to the
communities where its clients want to do business, Dentons knows
that understanding local cultures is crucial to successfully
completing a deal, resolving a dispute or solving a business
challenge. Now the world's largest law firm, Dentons'
global team builds agile, tailored solutions to meet the local,
national and global needs of private and public clients of any size
in more than 125 locations serving 50-plus countries.
The content of this article is intended to provide a general
guide to the subject matter. Specialist advice should be sought
about your specific circumstances.
To print this article, all you need is to be registered on Mondaq.com.
Click to Login as an existing user or Register so you can print this article.
The seminar will take place on 31 March 2017. It aims to provide German companies with an overview of the latest developments in relation to insurance coverage, banking transactions and legal aspects of doing business with Iran.
The employment landscape is one that is constantly shifting. Employers who fail to keep up with the changes do so at their peril.
We are pleased to invite you to this seminar, designed to help in-house counsel and HR practitioners get to grips with key recent and forthcoming developments in employment, pensions and immigration law and practice and what they mean for your workforce.
The fourth and final part of our mini-series on the draft ICO guidance on Consent, published on 2 March 2017, focuses on the practical impact the GDPR (General Data Protection Regulation) will have on how your organisation records and manages consent.
In light of the much anticipated ICO draft GDPR (the General Data Protection Regulation) Consent Guidance being published yesterday, 2 March 2017, we will be running a mini-series on the guidelines under consultation and the impact the GDPR will have on the much vexed position of consent and the impact on your business.
The first of our four discussions on the ICO guidelines for Consent will focus on the meaning of consent under the GDPR (General Data Protection Regulation) and how this change enhances the previous law on consent to data processing.
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).