An employee at Enterprise Rent-A-Car in the UK has been fined for stealing the personal records of customers. Isleworth Crown Court heard that Sindy Nagra, 42, accessed 28,000 records, photographed them and then sold the images to Iheanyi Ihediwa in Manchester.
Nagra was an administration clerk who worked from home in Hayes. Her duties were to log the details of customers which were supplied by insurance firms. Many of the files related to accidents. The offences came to light when Enterprise noticed Nagra was accessing far more files than she should have been and these included ones she had no logical reason to be looking at.
Enterprise notified the Information Commissioner’s Office (ICO) about its suspicions. ICO investigators uncovered the data theft and Nagra was charged under the Data Protection Act’s Section 55 with illegally acquiring, revealing and selling confidential information for personal gain.
She entered a guilty plea to the charges and was given a £1,000 fine and ordered to pay a victim surcharge of £100 plus £864 in prosecution costs. The ICO’s Christopher Graham said that although Nagra had lost her job she had made £5,000 by selling customers records.
He said UK courts were limited in their sentencing options for this genre of crime and this was something that needed changing. He noted that courts could only fine offenders and not send them to prison.
The commissioner added that the possibilty of prison sentences or community service orders would be more of a deterrent against data-theft. The court was not told how Ihediwa used the data Nagra stole, but the ICO says stolen records are often sold on to cold callers or other scammers.