Teenager fined £700 under DPA18 for leaking football referee's address

Teenage mechanic Corey Davies has been fined £706 after breaching the Data Protection Act 2018 (DPA18) by sharing referee John Beaton's personal contact details online following a controversial football match in the Scottish Premiership. Davies, 19, photographed a job card containing the home address, mobile phone numbers, and car registration of Beaton's wife when she brought her vehicle to the garage where he worked.

The information was shared on Snapchat, leading to a flood of unwanted calls and voicemails for the couple. Beaton required police surveillance after awarding a late penalty to Celtic against Motherwell on 13 May, a decision later ruled incorrect by a Scottish Football Association (SFA) panel.

Appearing at Hamilton Sheriff Court, Davies admitted disclosing personal information without consent. His lawyer stated that Davies, who has ADHD and was subsequently dismissed from his job, acted spontaneously rather than maliciously and apologised for the distress caused. Sheriff John Hamilton KC described the actions of the first-time offender as immature and stupid, imposing a £666 fine alongside a £40 victim surcharge.

Training Announcement: Freevacy offers a range of short one-day courses on a range of data-related subjects, including data protection topics such as conducting DPIAs and privacy-by-design, as well as how to use AI tools responsibly, cybersecurity best practices, and information access. The interactive sessions cover basic concepts through to advanced examinations of specific areas. Find out more.