T-Mobile says employee sold customer data to rivals

LONDON - An employee of mobile phone operator T-Mobile is facing prosecution after selling personal details of thousands of British…

LONDON - An employee of mobile phone operator T-Mobile is facing prosecution after selling personal details of thousands of British customers to rival companies in an alleged major breach of data protection laws.

In a statement, T-Mobile UK, part of Deutsche Telekom AG, said it had contacted the UK Information Commissioner's Office (ICO) after discovering an employee was passing on the information and it believed the investigation would result in a prosecution.

"While it is deeply regrettable that customer information has been misappropriated in this way, we have proactively supported the ICO to help stamp out what is a problem for the whole industry," T-Mobile said yesterday.

UK information commissioner Christopher Graham said the data was sold for "substantial amounts of money" to brokers working for other mobile phone companies.

READ MORE

The privacy watchdog said it planned to prosecute and would push for jail terms for anyone convicted. It said staff sold details relating to customers' phone contracts, including their names, addresses and contract expiry dates.

Rival companies bought the information and used it to make cold calls to the customers, offering them a new contract with a new network, the ICO said.

"Many people will have wondered why and how they are being contacted by someone they do not know just before their existing phone contract is about to expire," Mr Graham said in a statement.

"We are considering the evidence with a view to prosecuting those responsible and I am keen to go much further and close down the entire unlawful industry in personal data."

The watchdog has searched several premises after obtaining warrants and is preparing a prosecution file.

Many thousands of customers' account details were illegally obtained, the company told the watchdog.

Mr Graham said the practice was highly profitable, but illegal under section 55 of the UK Data Protection Act.

"The existing paltry fines for section 55 offences are simply not enough to deter people from engaging in this lucrative criminal activity," he said. "The threat of jail, not fines, will prove a stronger deterrent." - (Reuters)