Manchester United is currently caught in legal proceedings stemming from a data breach in 2018. The breach occurred when the football club inadvertently sent a single file containing sensitive information, including names, addresses, earnings details, and national insurance numbers of 167 employees, to a group of casual catering and hospitality staff. Each claimant is seeking an average of £3,000 in damages.
In response to the incident, Manchester United implemented measures to prevent future breaches and promptly notified the Information Commissioner’s Office (ICO). However, the ICO opted not to pursue further action.
This case serves as a reminder of the importance for employers to comprehend and adhere to their obligations under data protection laws and highlights the significance of taking proactive measures in safeguarding sensitive information.
