A former employee of a community based counselling charity has been prosecuted by the ICO at Preston Crown Court. Robert Morrisey sent spreadsheets containing the information of vulnerable clients to his personal email address without any business need to do so, which was without the consent of the data controller.
11 emails were sent from his work email account on 22 February 2017, which contained the sensitive personal data of 183 people, three of whom were children. The personal data included full names, dates of birth, telephone numbers and medical information. Further investigation showed that he had sent a similar database to his personal account on 14 June 2016.
Mr Morrisey pleaded guilty to 3 offences under section 55 of the Data Protection Act and was sentenced to a 2 year Conditional Discharge, ordered to pay costs of £1,845.25 and a £15 Victim Surcharge.