close
close

Previous convictions and suspended sentence against former RAC employee for theft of personal information

Previous convictions and suspended sentence against former RAC employee for theft of personal information

Two former RAC employees have been given suspended prison sentences and ordered to do 150 hours of unpaid work for unlawfully copying and selling over 29,500 lines of personal information.

Debbie Okparavero, 61, from Salford and Maliha Islam, 51, from Manchester, worked as customer service specialists at the RAC’s call center in Stretford. Their unlawful behavior was discovered by the ICO, the RAC, and reported to the ICO after it installed new security monitoring software.

The software showed that Okparavero had unlawfully accessed and copied personal data of people involved in traffic accidents. A subsequent search of Okaparavero’s cell phone revealed that the information was shared in a WhatsApp chat with Islam. News reports suggested that a third party paid for the information.

At a hearing at Minshull Street Crown Court on October 8, 2024, Okparavero and Islam were given six-month prison sentences, a suspended sentence of 18 months and 150 hours of unpaid work each. Both defendants had previously pleaded guilty to offenses under the Computer Misuse Act 1990 and the Data Protection Act 2018. Prosecution costs will be considered at a proceeds of crime hearing scheduled for March 5, 2025.

Andy Curry, head of ICO investigations, said:

“Accessing people’s personal information when there is no business need to do so is against the law. Then taking action to profit from other people’s misfortune by selling that information is appalling. We will always take action to protect the public from this type of unlawful behavior.

“We would like to thank the RAC for quickly bringing this breach to our attention to ensure that justice is served.”


Notes for editors

  1. The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and information rights. It protects information rights in the public interest and promotes the openness of public bodies and data protection for individuals. The company is headquartered in Wilmslow, Cheshire, and has regional offices in Edinburgh, Cardiff and Belfast.
  2. The ICO has specific responsibilities set out in the Data Protection Act 2018 (DPA2018), the General Data Protection Regulation (GDPR), the Freedom of Information Act 2000 (FOIA), the Environmental Information Regulations 2004 (EIR) and the Privacy and Electronic Communications Regulations 2003 (PECR) and another five laws/regulations.
  3. The ICO can take action to change the behavior of organizations and individuals that collect, use and retain personal data. This includes criminal prosecution, non-criminal enforcement and auditing.
  4. To report a concern to the ICO, call our helpline 0303 123 1113 or go to ico.org.uk/concerns.


Related Post