Offences relating to personal data

Clauses 170-173 of the DPA lists the offences relating to personal data:

  • Knowing and reckless:
    • Obtainment or disclosure of data without the controller’s consent
    • Procurement or disclosure of another person’s data without the controller’s consent
    • Retention of data without the controller’s consent
  • Selling of data that has been obtained in the above-mentioned circumstances
  • Knowing or reckless re-identification of de-identified personal data
  • Alteration, defacement, blockage, erasure, destruction or concealment of information in order to disclose the information that the person making the request would have been entitled to receive.