Welcome To The Data Leak Lawyers Blog

Kensington and Chelsea council fined £120,000 for indeliberate data breach

The Royal Borough of Kensington and Chelsea council has been fined £120,000 for an indeliberate data breach because the personal details of empty property owners in their constituency was published, contrary to data protection laws.

The Information Commissioner’s Office (ICO) has called it a “serious contravention” which has led to the huge fine being issued of £120,000.

According to the ICO reports, a Freedom of Information (FOI) request had been made in relation to the Grenfell Tower incident as part of research into social inequality, and it was this request that led to the accidental disclosure.
read more

By Author

Gwent Police to be investigated over “hiding” data protection breach

Worryingly, the police occupy one of the top spots in terms of organisations at the centre of data breaches, data leaks and hacks. Victims whose data is compromised in a data protection breach deserve to be notified as soon as possible, but it’s not unheard of for an organisation to “hide” a data breach as opposed to facing up to it and dealing with it.

Reportedly, Gwent Police are to be investigated for doing just that.

News sources say that Gwent Police are being investigated for failing to inform hundreds of individuals that their data protection rights had been breached.
read more

By Author

NHS staff accessing neighbour’s medical records is NOT okay

There is a recent worrying trend of NHS staff being caught out snooping on people they know, or are related to, by abusing their powers to access their medical records.

Let’s be absolutely clear: it is NOT okay for any member of the NHS to access their neighbour’s medical records without good reason or due authorisation.

If you are informed that a member of the NHS staff has accessed your medical records in such a way, or if you discover it has happened, you may be entitled to claim for data protection breach compensation.
read more

By Author

Ex-soldier prosecuted for posting vulnerable adult’s sensitive data on Twitter

The Information Commissioner’s Office (ICO) has released the details of a prosecution and a police undertaking after private and sensitive information was intentionally leaked on social media platform Twitter.

William Godfrey from Kent had been in a relationship with a probation officer when he came into possession of a USB data stick containing sensitive data. He later tweeted some of the sensitive data on the USB device and threatened to release more data as well.

For their part, Surrey Police signed an undertaking to improve their data protection policies and procedures.
read more

By Author

The Lead Experts Limited fined £70,000.00 for 100,000 nuisance calls

The Information Commissioner’s Office (ICO) issued The Lead Experts Limited (TLEL) a £70,000.00 fine for reportedly making 111,072 unwanted nuisance calls.

TLEL violated data protection principles and the Privacy and Electronic Correspondence Regulations (PECR) when it failed to obtain real and proper consent from the people they had bombarded with nuisance calls, asking if they wanted to reduce their energy bills.

Today, direct marketing is easier than ever. Making calls to tens of thousands of people is incredibly feasible, and it doesn’t cost a lot to do it.
read more

By Author

ICO issues True Telecom fine of £85,000.00 and an enforcement notice for nuisance calls

Based in Dartford, True Telecom Limited has been fined by the Information Commissioner’s Office (ICO) for illegally calling people to advertise their services.

The Telephone Preference Service (TPS) reported a number of complaints from individuals who received calls from True Telecom despite being signed up to TPS to specifically let organisations know not to contact them for direct marketing purposes. Organisations who call people to advertise their products and services must first receive consent before they do so.
read more

By Author

Most U.K. citizens don’t trust organisations and businesses with their personal data

The Information Commissioner’s Office (ICO) conducted a study to see how U.K. citizens feel about their personal data being shared with organisations and businesses, and the results reflect an inherent mistrust and lack of confidence in how their data is being stored and handled.

The results of the study are likely to have been influenced by the colossal and numerous high-profile data breaches in the last couple of years that have seen millions of people have their personal data breached time and time again.
read more

By Author

New ICO powers to fine organisations up to £17 million

Law changes in the coming months mean that the Information Commissioner’s Office (ICO) enforcement powers will no longer be subject to a maximum penalty fine of only £500,000. If any person, company or organisation is found to have breached Data Protection laws in the U.K., they may find themselves slapped with a much heftier fine.

The new maximum fine can be 4% of the company’s global turnover or €20million (almost £17million); whichever is the largest.

The government is introducing this as they adopt stricter E.U. laws for data protection into U.K. legislation. Despite Brexit, the government have said that the new regulation will be implemented by May 2018 in any event.
read more

By Author

ICO fines Verso Group £80,000 for breaching data protection laws

The Information Commissioner’s Office (ICO) has issued an £80,000.00 fine to broking company Verso Group (UK) Limited. The ICO found that the company violated data protection laws because it didn’t adequately inform data subjects what was being done to their personal information.

Whilst investigating two other companies for breaches of the Privacy and Electronic Communications Regulations, the ICO noticed that Verso Group may have been supplying the two companies with personal information for the others to send unsolicited direct marketing communications to unwilling subjects. One of the companies, Prodial Ltd, was fined for making 46 million nuisance calls and was subsequently fined £350,000 by the ICO.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author