September 23, 2019

The ICO explains that, following a referral from the Metropolitan Police Service, it undertook an investigation into the actions of two former officers, looking at whether they had acted unlawfully by retaining or disclosing personal data. It came after they had spoken to the media about a case they had worked on as serving officers involving an MP.

The ICO decided not to take formal regulatory action in this case, but notes that the case was investigated under the previous legislation, the Data Protection Act 1998. The law has since been strengthened through the Data Protection Act 2018, which adds a new element of knowingly or recklessly retaining personal data without the consent of the data controller.

The ICO is therefore advising anyone dealing with the personal details of others in the course of their work, whether in the public sector or private business, to take note of this update to the law, especially when employees are retiring or taking on a new job. To read the ICO’s warning in full, click here.