Individual convicted and fined for data protection breach

Coleman, who was employed by Virgin Media O2, sold confidential customer data to family friend Nicholas Harper for use in a boiler room fraud.

Raymondip Bedi and Patrick Mavanga were subsequently sentenced to a combined 12 years of imprisonment for their role in a crypto scam which defrauded at least 65 investors out of £1,541,799.

Harper had earlier pleaded guilty to assisting an offence to be committed in breach of the Data Protection Act but was subsequently acquitted of conspiracy to defraud by a jury.

Coleman was suspended by his employer, pending the outcome of the criminal investigation.

A fine is the maximum penalty for this type of offence. Coleman was fined £384. He was ordered to pay a £38 surcharge and prosecution costs contribution of £500.

Steve Smart, executive director of enforcement and market oversight at the FCA, said: 'Coleman abused his position of trust and enabled others to commit crimes which led to huge financial and emotional consequences for victims. This is our first prosecution under the Data Protection Act. Going forward, those who enable crime should be clear that we will use all of our powers to hold them to account.'

Notes to editors

1. Luke Coleman’s date of birth is 7 December 1994.
2. Unlawful obtaining and disclosure of personal data is a criminal offence, contrary to s.170(1) of the Data Protection Act 2018.
3. Two individuals sentenced to a combined 12 years for £1.5m crypto fraud[1].
4. Individual fined for data protection breach and acquitted of fraud offence[2].
5. The FCA’s ScamSmart[3] campaign provides advice on how to spot and avoid investment scams.
6. Check if a financial services firm is authorised by the FCA for the services being offered using the FCA Firm Checker[4].
7. The FCA enables a fair and thriving financial services market for the good of consumers and the economy. Find out more about the FCA[5].