Following an investigation, the ODPA found that HSBC had not appropriately gained consent for the use of an employee’s ‘special category data’, which is data considered to be more sensitive than general personal details. The breach An employee of the Guernsey branch of HSBC made a complaint to the ODPA on July 2021. It was […]