Ex-employee of adult care department fined for taking personal data

A former employee of Leicester City Council’s adult social care department has been fine for unlawfully obtaining personal data.

Nilesh Morar took details of service users without the council’s consent. The local authority became aware of this after Morar had left to set up his own business.

During an initial investigation, the council found the defendant had sent 34 emails to a private email account in February 2016, prior to him leaving the organisation.

It was later discovered that the personal information of 349 individuals was sent to his personal email address including sensitive personal data in relation to service users including medical conditions, details of care and financial details and records of debt.

Morar pleaded guilty at Nuneaton Magistrates’ Court to the offence under s.55 of the Data Protection Act of unlawfully obtaining personal data.

He was fined £160, ordered to pay £364.08 prosecution costs and a £20 victim surcharge. 

Steve Eckersley, Head of Enforcement at the Information Commissioner's Office, which prosecuted Morar, said: “People’s personal data is protected by law and employees should not be helping themselves to information if they decide to set up a new business or move to a new position.”

Eckersley added: “Employees need to understand the consequences of taking people’s personal information with them when they leave a job role. It’s illegal and when you’re caught, you will be prosecuted.”