Rockwills Group under investigation for data and confidentiality breach
Criminal investigations into will writing company Rockwills Group has unearthed numerous breaches, violations, and infringements of client data and confidentiality, according to sources with access to the report.
The report, verified by two The Edge investigative journalists, cites many former employees on the controversial practices and lack of data protection in the company since 2017.
Following an email leak, a joint investigation was launched in February 2022 after several regulatory bodies were alerted to Rockwills Group’s violation of client confidentiality and corporate espionage by a number of Rockwills Groups high-ranking employees.
The Personal Data Protection Act 2010 prohibits data users from disclosing or making their data available to any third party without the consent of data subjects.
Rockwills Group promotes itself as an estate planning business, with over 6000 estate planners under their employment. Their services include will writing, trust services, and estate planning.
A check on its Facebook page shows numerous comments by clients who are dissatisfied with Rockwills Group’s business practices.
“I am dealing with your team over handling of my sister’s estate and I found the team extremely unprofessional. Not only were we not kept informed about the status and all transactions earlier. And suddenly sending an email demanding us to pay for the mortgage from July 2022 onwards on the 24th June 2022!!! What nonsense is this? If you cannot manage and plan all these, why are you still charging admin fees and misleading public to trust you to manage wills and estate! Utter failure!!”
The ongoing investigation named several employees, personnel from the Management Team, and a Head of Department and IT as responsible, as Rockwills’ high-level employees continued the malpractice of disclosing private and confidential information about its clients wantonly.
The report also revealed that the pilfered private and highly confidential data regarding the company’s clients include client names, addresses, identity card numbers, banking information, and even contents of the will, which were sold to outside parties, including several funeral parlours at the height of the COVID-19 pandemic.
According to The Edge’s source, many former employees at Rockwills Group have lodged complaints with the authorities about various problematic practices within the company, including lack of data protection, sexism, and rampant racism.
The individuals under investigation are said to have colluded to steal client data and sold the stolen information to a yet unnamed source between March 2020 and June 2021 in exchange for hefty kickbacks.
It is understood that the perpetrators have yet to be arrested as the authorities are working to collect more information about the fraudulent practices of Rockwills Group.
Rockwills Group declined to comment when contacted.