If a bank staff member has access to my financial information, and has then disclosed some of this information (for example, my account balance) on social media, what remedies are available to me? Will there be a difference if I suspect this person acted maliciously?
In the absence of a jurisdiction I will deal with mine, Australia.
Complain to the financial services provider
- What has happened
- How it happened
- What effect this has had
- What you want them to do to make it right
Complain to the Financial Services Ombudsman
If you have not had the complaint resolved to your satisfaction within 45 days then you may escalate the complaint to the ombudsman.
If the information contains "personal information" that can be linked to you then there has been a breach of your privacy. Your account balance is personal information; the way it was disclosed must allow a third-party to link it to you.
The Privacy Act 1988 applies to "Australian and Norfolk Island government agencies and private sector organisations covered by the Privacy Act"; one category of private sector organisations that are covered are corporations with annual revenue of more than $3 million - any bank would meet this criteria.
If you have suffered a loss as a result of the disclosure you are entitled to be compensated. This may be part of a settlement under any of the complaint described above or if the bank is found guilty by the Federal court of breaching the Privacy Act then it can order compensation be paid.
Private Legal Action
This may be possible against both the employee and the bank (an employer is jointly and severally liable for the actions of an employee). However, you would have to prove a breach of contract or the tort of breach of confidence; "breach of privacy" is not a cause of action in common law in Australia.
In the case of the contract, the remedy for the breach may already be in the terms. Otherwise, you would have to prove the value of the damage.