Case study 16: Employee obtains data from customer file for his own use [2010] IEDPC 16 (2010)

Case study 16: Employee obtains data from customer file for his own use [2010] IEDPC 16 (2010)

The employee's access and use of customer data for personal purposes constituted a breach of data protection obligations; Company X's response and remedial actions resolved the complaint amicably.

Citation
[2010] IEDPC 16
Parties
Data Subject: Complainant; Data Controller (insurance Company): Company X; Data Processor (internal Staff): Employee of Company X
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Amicable Resolution
Outcome
amicable resolution
Legal Topics
Unauthorised Access, Internal Misuse of Personal Data, Insurance Sector Compliance
Data Protection Privacy Law Unauthorised Access Internal Misuse of Personal Data Insurance Sector Compliance

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 2 Authorities cited 1 Party arguments 2 Amounts and remedies 1
Sign in to unlock

Parties

Complainant

Data Subject

Company X

Data Controller (insurance Company)

Employee of Company X

Data Processor (internal Staff)

Procedural Posture

Data Protection Complaint / Amicable Resolution

Legal Issues

  1. 1 Did the employee of Company X unlawfully access and use customer personal data for personal purposes?
  2. 2 Did Company X comply with its data protection obligations regarding safeguarding and proper processing of personal data?

Ratio Decidendi

The employee's access and use of customer data for personal purposes constituted a breach of data protection obligations; Company X's response and remedial actions resolved the complaint amicably.

Court Disposition

amicable resolution

Orders

  • Company X issued an apology to the complainant.
  • Company X offered a €100 voucher towards the complainant's next renewal premium.