Outcomes - Selected Case Summaries

Inadvertent leak of personal data by financial services company

Informal Resolution | 25 November 2019

We were notified by a financial services company that they had inadvertently leaked personal data relating to one of their clients when they were posting legal documents to their website.  Instead of publishing redacted versions of the documents, with all personal data removed, the original documents were uploaded.  The error was noticed on the same day, and the unredacted versions of the documents were replaced

We conferred with the company and were satisfied with the actions taken to rectify the issues.  As there was no evidence of prejudice to the rights of the data subject, the case was closed with an informal resolution.