In a statement on Wednesday, an ICO spokesperson said: “Following a thorough review of the complaint raised with us, we have concluded our investigation. We upheld two parts of the complaint – namely, we found that an individual employed by Natwest shared information when they should not have done, and that by doing so they infringed the complainant’s data protection rights.
