Disclosure of employee information [2007] IEDPC 7

Disclosure of employee information [2007] IEDPC 7

Disclosure of employee personal data to Z without employee consent breached Section 2 of the Data Protection Acts; corrective action was required.

Citation
[2007] IEDPC 7
Parties
Respondent: XX; Complainant: Employees of XX; Third Party: Z
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Final Determination
Outcome
complaint upheld
Legal Topics
Disclosure of Personal Data, Employee Consent, Third Party Data Sharing
Data Protection Employment Law Disclosure of Personal Data Employee Consent Third Party Data Sharing

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 1 Authorities cited 1 Party arguments 2
Sign in to unlock

Parties

XX

Respondent

Employees of XX

Complainant

Z

Third Party

Procedural Posture

Data Protection Complaint / Final Determination

Legal Issues

  1. 1 Whether XX unlawfully disclosed employee personal data to Z without consent
  2. 2 Whether such disclosure breached Section 2 of the Data Protection Acts, 1988 and 2003

Ratio Decidendi

Disclosure of employee personal data to Z without employee consent breached Section 2 of the Data Protection Acts; corrective action was required.

Court Disposition

complaint upheld

Orders

  • XX confirmed destruction of mail merge file containing employee data.
  • Z confirmed no retention of employee records.