Information Commissioner's Office
‘Leaving for a new job? Don’t walk off with personal information’ warns ICO
The Information Commissioner’s Office (ICO) is warning employees that walking off with the personal information of their employer when changing jobs is a criminal offence.
The warning comes on the day a paralegal, who previously worked at Jordans Solicitors in Dewsbury, Yorkshire, was prosecuted for illegally taking the sensitive information of over 100 people before leaving for a rival firm in April 2013. The information was contained in six emails sent by James Pickles in the weeks before he left the firm. Pickles had hoped to use the information, which included workload lists, file notes and template documents but still contained sensitive personal data, in his new role.
Appearing at Bradford and Keighley Magistrates Court, 29 year-old Pickles was prosecuted under section 55 of the Data Protection Act and fined £300, ordered to pay a £30 victim surcharge and £438.63 prosecution costs.
ICO Head of Enforcement, Stephen Eckersley, said:
“Stealing personal information is a crime. The information contained in the documents taken by James Pickles included sensitive details relating to individuals involved in ongoing legal proceedings. He took this information without the permission of his former employer and has been rewarded with a day in court and a substantial fine.
“Employees may think work related documents that they have produced or worked on belong to them and so they are entitled to take them when they leave. But if they include people’s details, then taking them without permission is breaking the law. Don’t risk a day in court.”
Unlawfully obtaining or accessing personal data is a criminal offence under section 55 of the Data Protection Act 1998. The offence is punishable by way of ‘fine only’ - up to £5,000 in a Magistrates Court or an unlimited fine in a Crown Court. The ICO continues to call for more effective deterrent sentences, including the threat of prison, to be available to the courts to stop the unlawful use of personal information.
Notes to Editors
1. The Information Commissioner’s Office upholds information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
2. The ICO has specific responsibilities set out in the Data Protection Act 1998, the Freedom of Information Act 2000, Environmental Information Regulations 2004 and Privacy and Electronic Communications Regulations 2003.
4. Anyone who processes personal information must comply with eight principles of the Data Protection Act, which make sure that personal information is:
- Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and up to date
- Not kept for longer than is necessary
- Processed in line with your rights
- Not transferred to other countries without adequate protection
5. If you need more information, please contact the ICO press office on 0303 123 9070
Latest News from
Information Commissioner's Office
ICO raids businesses in Brighton and Birmingham suspected of making millions of nuisance calls13/03/2019 09:10:00
The Information Commissioner’s Office (ICO) has searched two addresses as part of an investigation into businesses suspected of making live and automated nuisance calls.
International Conference of Information Commissioners 201912/03/2019 09:10:00
Elizabeth Denham's opening address given yesterday to the International Conference of Information Commissioners.
Blog: Adtech fact finding forum shows consensus on need for change08/03/2019 16:20:00
There’s a well-quoted line from Steve Jobs, that as Apple CEO he didn’t employ smart people to tell them what to do, but so that they could tell him what to do.
Blog: Why the right of access to patient data needn’t be a headache for GPs08/03/2019 13:20:00
Blog posted by: Jovian Smalley, Group Manager – Engagement (Public Services), 07 March 2019.
Organisations should be doing more to achieve privacy accountability06/03/2019 09:10:00
The Global Privacy Enforcement Network's (GPEN) annual intelligence gathering operation looked at how well organisations have implemented the core concepts of accountability into their own internal privacy policies and programmes.
ICO statement on TPP SystmOne changes05/03/2019 09:10:00
ICO statement given yesterday on TPP SystmOne changes.
ICO crackdown on nuisance calls reaches 100 year milestone01/03/2019 09:10:00
Investigations by the Information Commissioner’s Office (ICO) into nuisance marketing have resulted in 16 company directors being banned from running a company for more than 100 years in total.
Former council officer fined for emailing CVs of rival job applicants to his partner28/02/2019 09:10:00
A former senior local government officer has been prosecuted for passing the personal information of rival job applicants to his partner.