Miss A applied for a job with a charity, which then added her to its donor mailing list. When she asked them to stop and to remove her personal details, she said her request was ignored.
We found that the charity failed to make clear to Miss A what her personal details would be used for.
We also found that the charity did not have consent to use Miss A's details for purposes other than her job application.
We recommended that the charity review the consents it had obtained from individuals whose details were acquired having applied for a job at the organisation
The charity accepted our findings and recommendation.