Case Study 14 in Annual Report 2012 is a case study on data protection obligations when an ex-employee takes a client list from his former employer to his new employer.
The Data Protection Commissioner investigated the former employer for its failure to keep secure the personal data that it held and recommended to the former employer that the contract of employment which included reference to business data be amended to include specific reference to the use of personal data to prevent any ambiguity.
The Data Protection Commissioner investigated the new employer for processing personal data for which it had no consent to process.