UK: ICO enforcement action for insider snooping breach
From the Information Commissioner’s Office, this announcement:
A former Social Services Support Officer at Dorset County Council has been prosecuted for accessing Social Care records without authorisation.
An internal investigation found that Ms Shipsey had inappropriately accessed the Social Care records without any business need to do so. The records related to four individuals known to Ms Shipsey.
Michelle Shipsey of Verwood, Dorset, appeared before Poole Magistrates’ Court and admitted one offence of unlawfully obtaining personal data, in breach of s170 of the Data Protection Act 2018. She was sentenced to a 6 month conditional discharge, ordered to pay costs of £700 and a victim surcharge of £20.