The employee of a car rental company who sold personal information relating to 28,000 customers has suffered fines and costs totalling more than £2,800 after pleading guilty to an offence under Section 55 of the Data Protection Act 1998.

Although the total of the fines etc. that she paid was less than she had received from companies in the accident claims industry, she had also lost her job and was without the means to pay more.

The unauthorised distribution of data is unlawful. Companies that fail adequately to protect personal data can also face fines.