DalVinder Singh used his authorized access rights to snoop on information about co-workers salaries and bonuses. The Information Commission's Office (ICO) Criminal Investigator said "Singh had been given clear training around the Data Protection Act, but chose to ignore that training. By accessing personal information he broke the law, and that is why he has been fined today."
"...when that curiosity led to him breaking the law, it cost him his job."The duration of the snooping is unclear or how it was discovered. Organizations seeking to proactively detect inappropriate access to records, even by authorized users, can utilize low-cost on-demand SaaS analytics services.
- Damian Moran, ICO Criminal Investigation Manager
Download a white paper on patient privacy breach detection. Learn how to proactively identify unauthorized breaches of patient data privacy, even by authorized users - with no hardware and no on-site software.
Learn how Veriphyr Identity and Access Intelligence delivers business insights - with no hardware and no on-site software.
(a) UK: Birmingham banker fined for reading colleagues’ bank accounts - www.PHIprivacy.net, 08/23/2014