Quote:
Originally Posted by BeeEmmDubleYuu
Just wondering if anyone knows under what circumstances can an individual be sued surrounding DPA (data protection act)?
I mean everyone in a company at some point has access to customer data so sales ' customer service guys have it, IT have access to it, aftercare have access to it etc but under what circumstances are individuals held responsible?
I know it's a long winded question but any examples would help. If something is unclear then feel free to ask.
|
From my DPO, when I asked if an individual could be prosecuted for accidental or deliberate misuse of customer personal data... "That's a criminal offence under section 55 of the DPA. Anyone who uses data without the consent of the the data controller is guilty of that offence. There is an exemption for journalism and public interest."
He is quite knowledgeable on this stuff so hopefully that helps....