Business chief slams ICO after crash data theft case

One of the so-called “North-West gang of eight”, who was prosecuted by the Information Commissioner’s Office for obtaining customers’ contact information without their consent, has hit back at the regulator, insisting there was no evidence of financial gain or criminal intent.

Craig Cornick, who runs multiple businesses in the legal and financial services sector, was accused of historical offences, alleged to have taken place between 2014 and 2017 within a previous business.

The private prosecution centred on the alleged hacking and obtaining of customers’ contact information without their consent.

Jurors unanimously found Cornick not guilty of one count of conspiring to access computer systems without authority but guilty of unlawfully obtaining personal data.

In a statement following the proceedings, Cornick said: “I am relieved to have been cleared of some serious and damaging accusations. The claims of computer hacking were shown to be completely unfounded, with no evidence of criminal intent or harm.

“While I acknowledge the challenging and important role the ICO plays in protecting citizens’ personal data, I reject any notion of wrongdoing.”

Cornick emphasised that he was willing to engage with ICO investigators early in the process and fully co-operate with their inquiries.

However, the ICO did not formally interview Cornick, nor obtain information through court orders and search warrants.

Cornick stated: “I was never subject to any searches of my personal or business properties, I was never interviewed, and my companies have never failed an audit. They are built on professionalism and trust and this result changes none of that.

In relation to the charge of unlawfully obtaining personal data, a majority guilty verdict was returned by the jury, although Cornick’s legal representatives are keen to point out that by this stage the jury had reduced to 10 people, with the maximum sentence for this charge being a financial penalty.

Cornick stated: “I have managed all my business ventures both past and present with integrity, and this was made clear throughout the case. I plan to clear my name and protect the reputation of my companies and the hard-working staff.

“Our technology has assisted in the processing of millions of claims over the years across multiple businesses and have always complied with every rule and regulation. This outcome does not reflect how we operate nor who we are.

“We’re proud of our record and will continue building ethical, compliant businesses that deliver measurable success.”

Laura Smith, head of corporate and financial crime at Cartwright King Solicitors, said: “We welcome the not guilty verdict of count one which clears Mr Cornick of serious wrongdoing.

“This was a private prosecution brought by the ICO, relating to offences said to have taken place a significant number of years ago. No evidence was produced throughout the prosecution case that showed Cornick, or the company received or processed stolen data.

“He maintains a strong standing within the business, legal and technology communities and will continue to carry on as normal as we work to fully clear his name.”

Cornick’s legal team are now planning to appeal.