The banks whose customer data was allegedly stolen from an Indian call centre and sold to an undercover reporter last year will face no charges, a spokesman for the Information Commissioner's Office said today.
The office, which helps enforce the 1998 Data Protection Act, has received no complaints about the alleged data theft since it was reported by The Sun last June, and has also not seen evidence that the incident took place, the spokesman said.
"We haven't been able to get [evidence] from The Sun," the spokesman said. "Without any further information, there's really no case."
The Commissioner's Office concluded from its investigations that security policies at the Indian call centres were sufficient, the spokesman said.
According to the story last year, the undercover reporter bought information relating to 1,000 bank accounts from a seller who said he had gathered the data from contacts at call centres in Delhi.
The data pertained to accounts held in British banks that had outsourced work to call centre companies in and around Delhi, the newspaper said. The seller, identified by The Sun as Kkaran Bahree, told the reporter that he could provide 200,000 more account details per month, according to the report.
Police in Delhi have said they could not arrest Bahree because they received no formal complaint from the call centre companies, the banks or their customers. India's National Association of Software and Service Companies (Nasscom) has also said it never received a complaint, and Bahree was never charged.
Bahree has claimed that he gave the reporter a CD at the insistence of a friend without knowing that it held classified contents. One Nasscom official has accused the paper of conducting a 'sting' operation in order to tarnish the reputation of India's outsourcing industry.
The Sun has said it turned over information about the incident, including the names of the banks involved, to the City of London Police, but it said it had no jurisdiction to bring prosecution in the UK and passed the information on to the Indian authorities.
The spokesman for the Information Commissioner said the case could be reopened if complaints or evidence relating to the data theft turn up.