Individuals working with personal information must closely follow data protection and privacy laws after a charity worker was prosecuted for making copies of sensitive data.

In June 2016 and February 2017, the individual, who has since been prosecuted, sent spreadsheets containing the information of 183 vulnerable clients to his personal email address without the knowledge of the data controller.

The individual admitted to unlawfully obtaining personal data in breach of Section 55 of the Data Protection Act 1998. He was given a conditional discharge for two years and ordered to pay prosecution costs of £1,845.25, as well as a victim surcharge of £15.