Welcome To The Data Leak Lawyers Blog

Police data breaches compensation claims

So, what happens when the Police are the ones who break the law and potentially cause harm to us?

Whenever there is trouble, the police are the first people we think of to call for help. They’re here to keep us safe, and we’re all very grateful for the work they do. They come to our aid when we need them. They put their lives and bodies on the line to keep the public safe. They put dangerous criminals behind bars to protect us.

Unfortunately, however, they have been known to breach our trust by leaking personal sensitive information…
read more

By Author

Charity worker prosecuted for sending confidential information about vulnerable people to himself

Robert Morrisey was prosecuted by Preston Crown Court for sending confidential information about 183 people to his personal computer.

At the time of the breach, Morrisey was working as a mentoring co-ordinator for Rochdale connections Trust charity.

In copying the sensitive information without permission or the knowledge of his employer, Morrisey lost his job. He also lost his position as a Magistrate and was ordered to pay over £1,800.00.
read more

By Author

Is the ethical handling of data the new moral responsibility for businesses and organisations? Could it help gain a competitive advantage?

The ethical handling of data has always been the aim of data protection watchdogs and officials. Companies and organisations have the responsibility to handle data securely under the Data Protection Act (DPA), but there is a term known as ‘ethically handling data‘ that’s growing in popularity.

The difference with ethical handling of data and normal handling of data goes beyond privacy, some believe. It’s about whether customers are aware of how their data will be used and how it will be protected from third parties above and beyond what anyone would generally assume.
read more

By Author

NHS remote and automated systems: What are the concerns?

In the past few years, the National Health Service (NHS) has made attempts to expand and ease the pressure on its extremely busy and hectic services with use of new technology. This included setting up an entire NHS internal email system that allows staff to send ‘secure’ emails to each other to share ‘sensitive information’.

An electronic prescription service is also available that allows GPs to send a prescription directly to a pharmacy.

But in the increasingly interconnected digital world, what are the concerns over using such technology? Should we be worried?
read more

By Author

ICO fines Verso Group £80,000 for breaching data protection laws

The Information Commissioner’s Office (ICO) has issued an £80,000.00 fine to broking company Verso Group (UK) Limited. The ICO found that the company violated data protection laws because it didn’t adequately inform data subjects what was being done to their personal information.

Whilst investigating two other companies for breaches of the Privacy and Electronic Communications Regulations, the ICO noticed that Verso Group may have been supplying the two companies with personal information for the others to send unsolicited direct marketing communications to unwilling subjects. One of the companies, Prodial Ltd, was fined for making 46 million nuisance calls and was subsequently fined £350,000 by the ICO.
read more

By Author

The trends of council and local government breaches

Although we appreciate the hard work of those who work in our councils and local government bodies, data breaches in the public sector remain a big problem. In order to do their jobs, these establishments often need access to a lot of our personal data such as contact details, medical records, criminal records, etc.

We trust them with this information because, after all, they’re a part of the public establishment who are supposed to be there to look after our best interests. But there have been a large number of data breach cases that have left many worried about our data in their hands.
read more

By Author

How punishable is the misuse of private information?

In a world where millions of files can be transferred in mere seconds at the click of a button, it’s hard to keep on top of who knows what these days. With today’s ever-advancing technology, one photograph can go viral on a worldwide scale in a matter of minutes.

For those of us who prefer our most personal information to not be broadcast and shared with the world, it can be difficult to keep it private nowadays. The Data Protection Act (DPA) helps with this since it came into force in 1998, and it tells us that, in England and Wales, personal information must be protected and tightly controlled.

Any misuse of private information can be punishable.
read more

By Author

Freedom of press vs data protection – the big debate

As we prepare ourselves for the General Data Protection Regulation, an updated version of the Data Protection Bill is making its way through Parliament. The bill will hopefully give people more control over their personal data and greater enforcement powers when organisations don’t keep it safe or misuse it.

In addition to this, the House of Lords changed the way reporters can obtain and use personal information in the name of public interest. This means individuals can make a claim for their private information not to be disclosed before it’s already plastered on the headlines.

Some news outlets are not happy about it!
read more

By Author

Yet another NHS worker fined for accessing sensitive medical records without authorisation

It seems the NHS can’t keep its staff under control as yet another worker has been found guilty of accessing sensitive medical records without authorisation.

Linda Reeves reportedly abused her position as a former data coordinator with access to the Trust’s patient database by rifling through medical records belonging to colleagues, friends and neighbours. She did not have any consent or authorisation from patients or her employer as the data controller.

Reeves has since resigned from her job at The University Hospitals of North Midlands NHS Trust.
read more

By Author

Nottinghamshire County Council fined £70,000 for leaving data belonging to vulnerable people exposed for 5 years

The Information Commissioner’s Office (ICO) issued Nottinghamshire County Council a fine of £70,000.00 for leaving sensitive personal data exposed online for half a decade.

The watchdog discovered the council’s ‘Home Care Allocation System’ (HCAS) was shared with care home providers using a simple link that did not require a username or a password.

The system contained a lot of personal information belonging to prospective and current care home users. Created in July 2011, the council was finally alerted to the security risk when a member of the public searched for HCAS online in June 2016 and found files readily accessible and completely unrestricted.
read more

By Author