Council employee sentenced for unauthorized data access
Worker who accessed sensitive children's records receives suspended prison sentence.
1Abuse of position
Geoffrey Smith, an employee at Herefordshire Council, misused his role in the Children and Young People directorate to access over 490 sensitive records of people he knew. The data included medical records, social worker reports, and family assessments.
2Legal proceedings
Smith pleaded guilty under Section 1 of the Computer Misuse Act 1990. On July 17, Worcester Magistrates' Court gave him a 2-month suspended sentence for 12 months, plus 120 hours of unpaid work and £2,154 in fines and victim surcharge.
3Sensitive data security
The Information Commissioner's Office (ICO) emphasized the highly sensitive nature of the accessed data. They stressed that safeguarding such information about children and families is a fundamental responsibility of public officials.
4Systematic violation
The severity of the case increased due to Smith's systematic access over four days, downloading 94 documents. The employee had no legitimate reason to access information about people he knew.
5Institutional security gap
The case exposed flaws in access control mechanisms for sensitive data within local governments. ICO's head of investigations emphasized personal data should only be accessible for intended purposes.
6Public trust impact
Such breaches damage citizens' trust in public institutions. ICO's strong response highlights growing importance of data protection standards and expected ethical conduct from public officials.