The Information Commissioner's Office (ICO) has
prosecuted an individual under the Computer Misuse Act 1990
(CMA 1990), resulting in a six-month prison sentence. This
prosecution is the first of its kind by the ICO.
The facts
The defendant was a man named Mustafa Kasim. Mr Kasim was
employed in the motor repair industry and had used a
colleague's log-in details to access a software system. This
allowed Mr Kasim to access the personal data of customers, such as
their names, phone numbers, and vehicle and accident information,
without permission. Mr Kasim continued to access the software after
moving to a different organisation.
Mr Kasim's previous employer noticed an increase in
complaints about nuisance calls. It notified the ICO about the
suspected breach and assisted the ICO with the investigation.
