Without the requested information, I can only provide you with the following general response, which will hopefully still answer your query. The latest version of the Data Protection Act (DPA) is the current legislation on data protection. It outlines certain principles for individuals and organisations to adhere to when they process an individual’s personal data. Any information from which an individual is personally identifiable will amount to personal data. If a party has acted in contravention of the DPA, the person whose rights have been breached could potentially take things further and even seek compensation for damages.
The first step is to consider reporting the alleged breach to the organisation in breach to see if things can be resolved directly with them, without the need to involve anyone else.
If that is unsuccessful, the next step is to consider reporting this to the Information Commissioner’s Office (ICO). They are the regulatory body that deals with data protection breaches and have certain powers at their disposal to deal with them, such as imposing fines and sanctions. However, they will not award compensation to the victim so the only way to try and do this is by personally going through court.
What the ICO can do, if a breach is reported to them, is order the company to do any of the following:
- impose a temporary or indefinite ban on the processing of data
- force them to comply with your request
- provide any required information
- warn and admonish
- order rectification, erasure or destruction of specific data
- impose severe financial penalties and fine the company in breach
If the victim wanted to take formal legal action, they may do so and issue a claim in the civil courts. There is no need to show that financial losses have been incurred and compensation can be sought for mere distress caused by the alleged breach. The level of compensation will depend on the severity of the breach and the effects it has had on the victim. As this is often a complex area, it is advisable to seek further professional advice on the applicable rights and options.