A youth support charity worker has been prosecuted for making his own copies of sensitive data, including that of children.
The Information Commissioners Office is warning workers after Robert Morrisey, who worked at Rochdale Connections Trust, was prosecuted for data protection offences. Morrisey, 63, sent spreadsheets containing the information of vulnerable clients to his personal email address without the knowledge of the data controller, his employer.
He appeared at Preston Crown Court on Tuesday and admitted unlawfully obtaining personal data in breach of Section 55 of the Data Protection Act 1998. He was given a conditional discharge for two years and was also ordered to pay prosecution costs of £1,845.25, as well as a victim surcharge of £15.
Morrisey, of Milnrow, Rochdale, had sent 11 emails from his work email account on 22 February 2017, which contained the sensitive personal data of 183 people, three of whom were children. The personal data included full names, dates of birth, telephone numbers and medical information. Further investigation showed that he had sent a similar database to his personal account on 14 June 2016.
Steve Eckersley, head of enforcement at the Information Commissioner’s Office, which brought the prosecution, said: “People have a right to expect that when they share their personal information with an organisation, it will be handled properly and legally. That is especially so when it is sensitive personal data.
“People whose jobs give them access to this type of information need to realise that just because they can access it, that doesn’t mean they should. They need to have a valid legal reason for doing so. Copying sensitive personal information without the necessary permission isn’t a valid reason.”
A spokesperson from Rochdale Connections Trust said that the charity did not want to make any comment at this time.
Related articles
