Finding out that someone working in an office or real estate setting has shared your personal information without permission can be upsetting and stressful — particularly where it has caused you practical problems or harm. Many people are unsure whether this is simply unprofessional behaviour or whether it crosses the line into something legally actionable.
This guidance explains, in plain English, how UK law treats the improper sharing of personal information, what steps you can take, and when compensation may be available.
Understanding the issue or context
Employees in offices, estate agencies, and similar professional environments often have access to sensitive personal data. This can include contact details, financial information, tenancy details, or private communications.
Problems arise where that information is:
- shared without your consent
- disclosed to people who had no legitimate reason to receive it
- used in a way that causes you distress, reputational harm, or financial loss
Even if the disclosure was not malicious, it can still amount to a breach of data protection law if it was unnecessary, careless, or outside the employee’s role.
Understanding whether what happened counts as a data breach is the first step towards clarity.
The legal rules or framework
In the UK, personal data is protected by data protection law, including the UK GDPR and the Data Protection Act 2018.
Organisations and their employees must:
- process personal data lawfully, fairly, and transparently
- only share data where there is a valid legal basis
- limit access to those who genuinely need the information
If an employee shares your personal information without a lawful reason, this may amount to a personal data breach. In most cases, responsibility sits with the organisation, not just the individual employee, because employers are generally accountable for how their staff handle data.
Where a breach causes you harm — including distress, anxiety, reputational damage, or financial loss — you may have grounds to complain and, in some cases, seek compensation.
Practical steps to take
If you believe an office or real estate employee has shared your information improperly, the following steps can help bring clarity.
First, write down exactly what information was shared, who shared it, who received it, and how you became aware of the disclosure.
Second, raise the issue formally with the organisation involved. Ask for an explanation of how the breach occurred and what steps they are taking to address it.
Third, consider reporting the matter to the Information Commissioner’s Office (ICO). The ICO regulates data protection in the UK and can investigate breaches and take enforcement action.
Fourth, keep evidence of any harm caused, such as distress, loss of work, financial impact, or damage to relationships.
Finally, if the breach has had a real impact on you, fixed-fee legal guidance can help you assess whether a compensation claim is realistic and proportionate.
Common pitfalls to avoid
A common mistake is assuming that only large-scale data leaks matter. Even sharing information with one unauthorised person can be a breach.
Another pitfall is focusing only on whether the employee “meant” to cause harm. Intent is not required for a breach to exist.
Some people also delay raising the issue, which can make it harder to investigate what happened.
Finally, relying on informal apologies without understanding your legal position can leave matters unresolved.
Frequently Asked Questions
Is it illegal for an employee to share my personal information?
It can be, if there was no lawful reason to do so.
Who is responsible — the employee or the company?
Usually the organisation, as employers are responsible for their staff’s data handling.
Can I complain to a regulator?
Yes. You can raise concerns with the Information Commissioner’s Office.
Can I get compensation for distress alone?
Potentially, yes, if the breach caused you genuine distress.
Do I need proof of financial loss?
Not always. Non-financial harm can still be relevant.
Should I get legal advice before taking action?
Many people find fixed-fee guidance helpful to decide the best next step.
Conclusion
If you’d like to understand your rights and options in plain English, visit LegalGuidance.org — a free resource powered by Martin Taggart Legal Consulting.
For professional, fixed-fee advice from a UK solicitor, visit MartinTaggart.com.
This information is general guidance only and not legal advice. For personalised support, please contact Martin Taggart Legal Consulting.