Criminal sanctions for data protection breaches

Car rental firm’s employee sentenced for data theft

A former employee of  Enterprise-Rent-A-Car was recently sentenced for conspiring to steal customer information which was later used by accident claims companies to make nuisance calls. Unlawfully obtaining, disclosing and selling personal data is a criminal offence under section 55 of the Data Protection Act.

The employee was an administrative assistant who was dismissed by the rental car company.  She was fined by the Courts but the Information Commissioner (IC) has since commented that “the fines that courts are issuing at the moment just don’t do enough to discourage would-be data thieves”.  The IC is calling for more effective deterrent penalties than just fines and would like the Courts to issue custodial sentences in serious cases.

If you need to discuss employment related data protection issues then please do get in touch