The HMRC boo-boo: ID fraud victims could get compensation

Iain Dale has raised the question whether those whose data has been leaked by HMRC could sue.

The answer is, strictly no; you can’t sue simply for loss of your data. But if you suffer damage – say, as a result of ID fraud using bank account details leaked by the HMRC – then you do have a right to compensation under section 13 of the Data Protection Act 1998, for breach of the seventh data protection principle. You might get your money back, plus a bit of compensation for distress, too.

The information commissioner has published advice on how to claim.