Jonathan Riches

A man who unlawfully accessed personal data has been sentenced after our investigation.

Jonathan Riches, 46, pled guilty to an offence under section 55 of the Data protection Act 1998 at Cardiff Crown Court. The court heard Riches had illegally accessed motorists’ details from Enterprise Rent-A-Car and who would pursue personal injury claims for financial gain.

Her Honour Judge Francis handed down the sentence to Mr Riches of a fine of £10,000, plus costs of £1,700

The offences were committed between 2009 and 2011. Mr Riches had previously been an employee of Enterprise Rent-A-Car, then left in 2009 to set up his own personal injury firm. He was still in contact with former colleagues, and through this would illegally obtain the details of those involved in road traffic accidents then contact them offering legal services. At one point, Mr Riches, through his accomplices, had access to the internal Enterprise database allowing him to access the personal details of clients.

He had previously been ordered to pay Enterprise Rent-A-Car a £300,000 civil settlement, then was interviewed by our criminal investigations team the following year. He was first summonsed to appear in court in 2016. However, he had already relocated to the United States, therefore he failed to appear in court. A warrant was then issued for his arrest. He returned and surrendered himself to authorities in 2024.