Welcome To The Data Leak Lawyers Blog

NHS staff accessing neighbour’s medical records is NOT okay

There is a recent worrying trend of NHS staff being caught out snooping on people they know, or are related to, by abusing their powers to access their medical records.

Let’s be absolutely clear: it is NOT okay for any member of the NHS to access their neighbour’s medical records without good reason or due authorisation.

If you are informed that a member of the NHS staff has accessed your medical records in such a way, or if you discover it has happened, you may be entitled to claim for data protection breach compensation.
read more

By Author

Ex-soldier prosecuted for posting vulnerable adult’s sensitive data on Twitter

The Information Commissioner’s Office (ICO) has released the details of a prosecution and a police undertaking after private and sensitive information was intentionally leaked on social media platform Twitter.

William Godfrey from Kent had been in a relationship with a probation officer when he came into possession of a USB data stick containing sensitive data. He later tweeted some of the sensitive data on the USB device and threatened to release more data as well.

For their part, Surrey Police signed an undertaking to improve their data protection policies and procedures.
read more

By Author

The Lead Experts Limited fined £70,000.00 for 100,000 nuisance calls

The Information Commissioner’s Office (ICO) issued The Lead Experts Limited (TLEL) a £70,000.00 fine for reportedly making 111,072 unwanted nuisance calls.

TLEL violated data protection principles and the Privacy and Electronic Correspondence Regulations (PECR) when it failed to obtain real and proper consent from the people they had bombarded with nuisance calls, asking if they wanted to reduce their energy bills.

Today, direct marketing is easier than ever. Making calls to tens of thousands of people is incredibly feasible, and it doesn’t cost a lot to do it.
read more

By Author

ICO issues True Telecom fine of £85,000.00 and an enforcement notice for nuisance calls

Based in Dartford, True Telecom Limited has been fined by the Information Commissioner’s Office (ICO) for illegally calling people to advertise their services.

The Telephone Preference Service (TPS) reported a number of complaints from individuals who received calls from True Telecom despite being signed up to TPS to specifically let organisations know not to contact them for direct marketing purposes. Organisations who call people to advertise their products and services must first receive consent before they do so.
read more

By Author

Most U.K. citizens don’t trust organisations and businesses with their personal data

The Information Commissioner’s Office (ICO) conducted a study to see how U.K. citizens feel about their personal data being shared with organisations and businesses, and the results reflect an inherent mistrust and lack of confidence in how their data is being stored and handled.

The results of the study are likely to have been influenced by the colossal and numerous high-profile data breaches in the last couple of years that have seen millions of people have their personal data breached time and time again.
read more

By Author

New ICO powers to fine organisations up to £17 million

Law changes in the coming months mean that the Information Commissioner’s Office (ICO) enforcement powers will no longer be subject to a maximum penalty fine of only £500,000. If any person, company or organisation is found to have breached Data Protection laws in the U.K., they may find themselves slapped with a much heftier fine.

The new maximum fine can be 4% of the company’s global turnover or €20million (almost £17million); whichever is the largest.

The government is introducing this as they adopt stricter E.U. laws for data protection into U.K. legislation. Despite Brexit, the government have said that the new regulation will be implemented by May 2018 in any event.
read more

By Author

ICO fines Verso Group £80,000 for breaching data protection laws

The Information Commissioner’s Office (ICO) has issued an £80,000.00 fine to broking company Verso Group (UK) Limited. The ICO found that the company violated data protection laws because it didn’t adequately inform data subjects what was being done to their personal information.

Whilst investigating two other companies for breaches of the Privacy and Electronic Communications Regulations, the ICO noticed that Verso Group may have been supplying the two companies with personal information for the others to send unsolicited direct marketing communications to unwilling subjects. One of the companies, Prodial Ltd, was fined for making 46 million nuisance calls and was subsequently fined £350,000 by the ICO.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author

Leicester city council worker fined for stealing sensitive personal data to use for his own business

Nilesh Morar worked for Leicester City Council in the Adult Social Care Department where he reportedly stole a wealth of personal sensitive data for personal financial gain.

He reportedly took the information belonging to vulnerable people without the Council’s knowledge or permission.

After he stole the personal data, Morar left his job with the Council to set up his own business, so the motives for stealing the data seem quite apparent.
read more

By Author

TalkTalk fined £100,000 for putting 21,000 customers at risk of scams and fraud

As if the £400,000 fine last year was not enough, TalkTalk has been slapped with a £100,000 fine for reportedly breaching data protection laws over customer information.

Unlike the last fine which came off the back of countless customers’ information being exposed after a malicious hacking, TalkTalk is being fined for an alleged lack of information security, leaving customer data “open to exploitation by rogue employees.”

TalkTalk employees reportedly have access to a great deal of information, heightening the need for internal security measures.
read more

By Author