We've been featured in:
Could I Claim For A Company Email Data Breach?
By Cat Way. Last Updated 7th March 2024. Has a company email data breach compromised your personal information? If you have sustained harm then you may be eligible to make a claim. This article will help define a company email data breach as well as personal data breaches. We will also explain what data breach compensation you may be eligible to receive.
Company email data breach claims guide
A personal data breach can cause both physical and mental suffering. From financial losses and identity fraud to the general mental and emotional harm you could sustain, you may have grounds to make a claim.
Our advisors are available 24/7 to answer any of your questions and can help you determine if your claim is valid. If this is the case, our advisors may pass you through to our data breach solicitors and they can help you begin the process. Get in touch today by:
- Calling 0800 073 8804
- Starting your claim online
- Emailing info@legalexpert.co.uk
- Using the live chat feature
Select A Section
- What Is A Company Email Data Breach?
- When Could Information Shared On A Company Email Be A Data Breach?
- What Personal Information Could Be Shared On A Company Email?
- How To Claim For A Company Email Data Breach
- Company Email Data Breach Compensation Calculator
- Start A Company Email Data Breach Claim
What Is A Company Email Data Breach?
Data breaches can be a complex area of the law and it can help to understand the meanings behind the words.
A personal data breach describes a security incident which compromised your personal information meaning it has been altered, disclosed, lost, destroyed or accessed without authority through accidental or deliberate actions. This can be cyber related or by human error.
Data controllers are organisations that decide why and how your personal or sensitive information will be processed. Data controllers may choose to outsource to a processor who can process data on a controller’s behalf.
Successful company data breach claims will mean proving that your personal or sensitive data has been breached. You will need to show why you hold the company responsible for the breach i.e. did they fail to train staff on how to protect and secure the information you provided? Finally, you will need to demonstrate how you have suffered because of this data security incident.
To learn more about what personal information could be accessed via a personal data breach as well as how it can be misused, contact our advisors today.
When Could Information Shared On A Company Email Be A Data Breach?
In this country, we have stringent data protection laws. The UK General Data Protection Regulation UK GDPR and the Data Protection Act 2018 both dictate how personal information should be protected. It is when these laws are not adhered to that personal information processed by a data controller could be involved in a data breach they could be held liable for.
For example, if the accountancy department at the company you work for shares your personal financial information by sending your payslip to the incorrect address they could be liable for the breach.
The personal data breach compensation you could receive in a successful claim will be made up of two types of damages. You may be able to make a claim for any mental or financial harm you suffer as a result of this breach.
If a blind carbon copy (BCC) is not used to anonymise the recipients of an email, their email addresses could be used to identify them. This can be an example of how human error can lead to a personal data breach.
Contact our advisors for a better understanding of what information could be shared as part of a company email data breach and what rights you may have after a breach.
What Personal Information Could Be Shared On A Company Email?
We will first explain what constitutes personal information as it can make it easier to understand what information is protected by data security laws in this country.
The ICO classifies personal data as information that relates to an identified or identifiable individual. Some examples of information can include:
- Name
- Email address
- Date of birth
- Gender
- Financial information
- Political affiliations
- Telephone number
- Home address
Contact our advisors today for advice on what other personal information can be part of a personal data breach.
How To Claim For A Company Email Data Breach
All data controllers and processors are subject to the UK General Data Protection Regulation (GDPR UK) and the Data Protection Act 2018 (DPA). These are two pieces of legislation that run alongside each other to ensure the protection of your personal data. Under these pieces of legislation the company in control of your personal information must be:
- Lawful, fair and transparent.
- Limit the purpose.
- Only collect data that is necessary.
- Be accurate.
- Only keep it for as long as necessary.
- Be confidential (security)
- Accountability.
If a company fails to ensure the protection of your personal data and you suffer harm as a result, you may be able to make a claim. Contact our advisors today for free advice on how to report a data breach incident.
Company Email Data Breach Compensation Calculator
Compensation for data breaches can break down into two categories, which include:
- Material damages – These cover the tangible damages you have suffered due to a data breach, for example, if your financial information was stolen this could result in financial theft or impersonating your identity which can result in taking out loans, negatively impacting your credit score.
- Non-material damages – These cover the mental effects of the data breach incident. Violating your privacy can cause stress, depression, anxiety and other psychological distress.
Following the case of Vidal-Hall v Google, you can now claim for psychological harm alone without suffering financial damages. As part of claiming for non-material damages, The Judicial College Guidelines (JCG) publishes potential compensation brackets for injuries to your mental health. The following table shows possible compensation for injuries listed according to type and severity of injury:
| Injury | Compensation | Notes |
|---|---|---|
| Severe mental damage generally (a) | £51,460 to £108,620 | Marked problems with the ability to cope with life, education and work. Impacted relationships with family, friends and close contacts. Award affected by the extent of treatment, future vulnerability, prognosis, and whether medical help was needed. The fact of abuse of trust is relevant to the award. |
| Moderately severe mental damage generally (b) | £17,900 to £51,460 | More optimistic prognosis with the same factors noted above. |
| Moderate mental damage generally (c) | £5,500 to £17,900 | A marked improvement. Work-related stress may fall under this bracket. |
| Less severe mental damage generally (d) | £1,440 to £5,500 | Award depends on the disability period and how much daily activity and sleep were affected. |
| Severe PTSD (a) | £56,180 to £94,470 | Permanent effects preventing working at all or to pre-trauma level. All aspects of life are negatively impacted. |
| Moderately severe PTSD (b) | £21,730 to £56,180 | Better prognosis of some recovery with professional help. Effects are still likely to cause notable disability for the foreseeable future. |
| Moderate PTSD (c) | £7,680 to £21,730 | Largely recovered and any persisting effects are not grossly disabling. |
| Less severe PTSD (d) | £3,710 to £7,680 | Virtual full recovery within one to two years with minor symptoms persisting longer. |
Contact our advisors for a free estimation of what your personal data breach claim could be worth.
Start A Company Email Data Breach Claim
Now that you’ve learned more about what constitutes a company email data breach, and what to do if you should experience one, you may be interested in making a claim. This process can seem daunting, but one of our solicitors could help.
Our solicitors offer their services under a kind of No Win No Fee arrangement known as a Conditional Fee Agreement (CFA). Under this type of contract, you won’t be asked to pay any upfront or ongoing fees in order for your solicitor to start working on your claim for an email data breach.
Similarly, you won’t be asked to pay any fees for your solicitor’s work if your claim doesn’t succeed. If your claim does succeed, your solicitor will take a success fee. This is taken directly from your settlement award and is a small, legally-capped percentage.
To find out if one of our solicitors could help you claim for a personal data breach, get in touch today. Our advisors can offer a free consultation and give you more information on claiming for a personal data breach of your email address or other personal data. You can get started by:
- Calling 0800 073 8804
- Starting your claim online
- Using the live chat feature
Helpful Links
If you would like more helpful information about data breaches, please see our other articles below:
- Learn about what to do if your Data Has Been Breached and find out if you could be entitled to claim.
- If your Religious Or Political Beliefs Were Exposed In A Data Breach, you may be able to claim. Read our guide to learn more.
- If your Employer Exposed Your Mental Health Information In A Data Breach, our guide can offer more information.
Or, refer to these informative links:
- Understanding Secure Email
- Email Marketing Guidelines From The ICO
- Personal Data Breaches Guide By The ICO
Contact our advisors if you would like free legal advice on company email data breach claims.
Guide By Eaton
Edited By Melissa.
Meet The Team
Our Top Legal Guides
