ROYAL GIBRALTAR POLICE FINED FOR UNLAWFUL DISCLOSURE OF PERSONAL DATA

The Information Commissioner has issued the Royal Gibraltar Police (the “RGP”), with a fine of £5,000 in consequence of the unlawful disclosure of personal data, in breach of data protection legislation. The breach relates to personal data contained in pocketbook entries and witness accounts regarding a police investigation, which were erroneously disclosed to the wrong recipient. The Information Commissioner was notified of the breach by the RGP, in line with their obligations under Part 3, Chapter 4, Section 76 of the Data Protection Act 2004, which requires notification to the Information Commissioner where a personal data breach is likely to result in a risk to the rights and freedoms of individuals.