Data protection breach

Emsb1522

Hi all
just after some advice please 
a business I use has sent my data to an insurance company who have then sent my details to one of their clients. This client has contacted me personally saying they was going to turn up at my house to tell me about this breach. I’ve become quite concerned over some things that’s as said in the phone call so have had to take a couple of measures in the mean time in regards to my safety. 

What do I do now? Do I seek legal advice? 

The business have rang me and said all they can do is apologise.

The business has admitted they are at fault and have said a full investigation is underway to find out how my data was breached. 

Thanks 

Robin9

1) Wait for the business you use to complete their investigations

2) Contact the insurance company and get them to investigate

dunstonh

What do I do now? Do I seek legal advice? 

You do nothing and you don't need to seek legal advice.

The business has admitted they are at fault and have said a full investigation is underway to find out how my data was breached. 

Let them carry this out.

In reality, this is a very minor breach which will not result in any action being taken but you may be awarded a goodwill gesture as payment.

[Deleted User]

If you needed to take security measures then the cost may be recoverable. It depends if they were reasonable or not.

The breech itself entitles you to compensation. See here for some details: https://ico.org.uk/your-data-matters/data-protection-and-journalism/taking-your-case-to-court-and-claiming-compensation/

How much you get depends on what was disclosed. For personal data it's typically £750-2000, depending on the nature of it.

Decide how much you think is reasonable and send them a letter before action with a settlement amount.