FCA secures first Data Protection Act 2018 conviction
The Financial Conduct Authority (FCA) has secured its first prosecution under the Data Protection Act 2018 (DPA 2018), after a Virgin Media O2 employee, Luke Coleman, pleaded guilty to unlawfully obtaining and subsequently disclosing personal data in breach of DPA 2018, s 170(1). Coleman sold confidential customer data to a family friend, Nicholas Harper, who used it in a boiler room fraud. Coleman was fined £384 and ordered to pay a £38 victim surcharge and £500 in prosecution costs.