Woman Faces Allegation Of Unlawfully Obtaining Personal Data At Health Services Authority
|
Getting your Trinity Audio player ready...
|
By Alric Lindsay
Fiona Clare Coffey appeared in the Summary Court today, June 9, 2025, to face an allegation of unlawfully obtaining personal data. Coffey pleaded not guilty to the charge.
Based on the brief information provided, it was alleged that, on a date unknown between January 1, 2025, and June 26,2025 at the Health Services Authority, Grand Cayman, without the consent of the data controller, knowingly obtained personal data, namely medical records.
After discussion, a case management hearing was scheduled for July 2, 2025, for disclosure confirmation, trial date setting, and issue identification. The Crown was reminded to serve all papers, including unused material, by then, as initial disclosure was limited.
Note to readers
Unlawfully obtaining personal data is an offence under section 54 of the Data Protection Act (2021 Revision). This states as follows:
Unlawful obtaining etc. of personal data
54. (1) A person shall not, knowingly or recklessly, without the consent of the data controller — (a) obtain or disclose personal data; or (b) procure the disclosure to another person of the personal data.
(2) Subsection (1) does not apply to a person who shows that the obtaining, disclosing or procuring — (a) was necessary for the purpose of preventing or detecting a crime; or (b) was required or authorised by or under any enactment, by any law or by the order of the Grand Court.
(3) A person who contravenes subsection (1) commits an offence and is liable, upon conviction, to a fine of one hundred thousand dollars.
(4) A person who sells personal data commits an offence if the person has obtained the data in contravention of subsection (1) and is liable, upon conviction, to a fine of one hundred thousand dollars.
(5) A person who offers to sell personal data commits an offence if — (a) the person has obtained the data in contravention of subsection (1); or (b) the person subsequently obtains the data in contravention of that subsection.
(6) For the purposes of subsection (5), an advertisement indicating that personal data are or may be for sale is an offer to sell the data.
