More credit unions face data probe by watchdog

Assistant Data Protection Commissioner Tony Delaney suspects that other credit unions may have paid for addresses and PPS numbers obtained through illegal means by so-called tracing agents.

In a landmark case this week, two rogue private investigators were found guilty of stealing data, which belonged to unsuspecting credit union customers, from the Department of Social Protection and the HSE.

The court heard that the agents used "subterfuge" and "blagging tactics" to falsely obtain the information from the State bodies.

The information was then passed on to seven credit unions in return for a fee.

The firm at the centre of the scandal, MCK Rentals Ltd, pleaded guilty to breaching data protection laws at Bray District Court on Monday.

Company directors Margaret Stuart, (56), of Newtownmountkennedy, Co Wicklow, and Wendy Martin, (45), of Ballybrack, Co Dublin, were fined a total of €10,500 for illegally obtaining information in breach of the Data Protection Act.

Mr Delaney, who described the women's actions as "shameful and shocking", is now expected to widen his net beyond his initial cluster of credit unions, which were based in Limerick and the midlands.

The commissioner has identified other credit unions who have used MCK ltd as well as rival private investigation firms. Mr Delaney has also met the Irish League of Credit Unions (ILCU) amid the expectation that a charter will be drawn up.

The credit unions that hired MCK Rentals Ltd will be written to and reminded of their data protection obligations.

Meanwhile, a Labour Junior Minister last night vowed to ensure that the breaches which took place at the Department of Social Protection would not recur.

An Irish Independent investigation revealed in August that private investigators obtained data from the Department of Social Protection through a single phone-call.

Social Protection Minister Joan Burton requested two of her most civil servants to examine the adequacy of the controls within her department after being informed of the breaches by the commissioner.

Minister for the State at the Department, Kevin Humphreys, said it was important that lessons are learned by staff.

"We are doing everything with can to ensure there is no further occurrence, including additional training to make sure staff are aware of their obligations," he said.

"We will do everything we can to ensure bogus callers will not get data on citizens."