“(4) Those police-led matters bear relatively little upon what happen [sic] internally within the Respondent’s organisation. However, it is noted at the outset that everybody involved with the case in the Respondent’s organisation was aware of the nature of the police investigation - even though it was eventually said that a specific piece of material which was the core focus for the police investigation was not to be taken into account in internal investigations and proceedings. The Tribunal finds that it was clearly the case that the circumstances were notorious throughout all of the relevant stages.”
“(22) The Claimant’s first response - and this has remained his consistent position throughout - was that he had no knowledge at all of the existence of those files in his account. He maintained that he was not aware either that they were there or how they might have found their way there. In consequence, he was unable to explain anything more than that.”
“(23) … contained detailed information about each of the total of 28 (and relevant 27 files) which had been discovered on the “Cloud” account of the Claimant. These indicated various transaction dates for activity within the Royal Mail computerised systems. However, the information set out in that list … did not indicate (certainly in relation to the time when Mr O’Donavan [sic] was undertaking his investigation - and, it also emerged, over the entire period up until the commencement of this hearing before the Tribunal) whether there had been access to those files and, if so, by whom and on what date.”
“(26) … was under the impression that the report with which he had been furnished informed him of computer transactions linked to the actions of the Claimant. …”
“(31) Mr O’Donavan [sic] swiftly took the view that he had little need to go further into the “password sharing” issue, because the Claimant had volunteered that information and had effectively confessed his misconduct and breach of the codes in respect of it.”
“39. … as regards the “password sharing” there was little or no investigation needed, since the Claimant had accepted what he had done.”
“(32) … came to the view that the Claimant had been directly responsible for downloading the offending files. …”
“… my decision is that you will receive a Major Offence”
“… you have fully admitted to the Breach of Royal Mail IT Security Policy and from the information available to me including evidence from POSIS [Post Office Security Investigations Service] it is my belief you were also responsible for the downloading of video files of an obscene nature into your account profile.”
“Mr Choksi also argues that this practice is widespread. He offers no evidence to support this, and the witness statements suggest that it was widely seen as inappropriate to share passwords. In the migration to Windows 7 the importance of password protection were [sic] made clear. Even if there were others who shared passwords Mr Choksi ought to have shown leadership appropriate to his position as an MS2, which is in the upper half of our middle management structure. In some ways its [sic] similar to a motorist caught speeding who claims other people were also speeding. I consider that Mr Choksi knew full well sharing his password was inappropriate, and he is accountable for this. Of itself, I would consider this a serious matter, but one which could be dealt with using action short of dismissal.”
“The Appeal is a rehearing, that means your reasons and evidence should be complete to include material already presented at your formal conduct interview, anything you wish to expand upon and any new evidence which has come to light since then.”
“3.15. Although at appeal Mr Choksi originally stated that other people had shared their passwords with him, on further questioning he admitted that this was relatively recently and only because he was part of the Connect 2010 project upgrading users from Lotus Notes to Microsoft Outlook.”
“5.16. … For the purposes of clarification, if I were to have found that Mr Choksi shared his password with colleagues, I do not agree with Mr O’Donovan’s conclusion that it would have resulted in action short of dismissal.”
“3.21. I myself have been with the business almost as long as Mr Choksi, and in fact I was part of Royal Mail when computers were first introduced. I have also dealt with a number of IT cases involving information security and at no time, in any unit, has it been custom or practice to share passwords. Managers, especially those at Mr Choksi’s level, are absolutely clear on the likely consequences of sharing login details.”
“(4) … the determination of the question whether the dismissal is fair or unfair (having regard to the reason shown by the employer) - (a) depends on whether in the circumstances (including the size and administrative resources of the employer’s undertaking) the employer acted reasonably or unreasonably in treating it as a sufficient reason for dismissing the employee, and (b) shall be determined in accordance with equity and the substantial merits of the case.”
“12. … in the light of submissions made in relation to the appropriate approach within the framework of what everybody agrees is a “slightly tweaked”
“36. Returning to the issue of the statutory “test of reasonableness”, in relation to the dismissal of the Claimant taken as a whole, it seems to the Tribunal that, as regards the reason of “misconduct” relating to the password misuse, and taking into account the clear procedures and explicit prohibitions about “password sharing” together with the knowledge of those acknowledged by the Claimant, the decision to dismiss was one which justifiably raised serious concern for the Post Office [sic]. That being the case, the issue becomes whether the decision to dismiss the Claimant fell within the “band of reasonable responses” open to the Respondent. The Tribunal has thought about this long and hard and feels that the decision was harsh. However, that is not the test - which is to determine whether the Respondent’s action was within the band of reasonable responses open to them. It would be an error of law for the Tribunal to substitute its view of what the employer should have done for what they actually did. 37. It seems to the Tribunal - particularly having regard to the way in which the Post Office’s Code of Conduct is set out, with warnings spelled out in very serious terms, and with an additional “pop up warning” given whenever a user logs in to the system - that dismissal of an employee consciously acting in breach of the code must be within the band of reasonable responses open to the employer. This is further underlined by another matter which was mentioned during the course of the hearing - which, while not in itself decisive, serves to show the line of thinking adopted by the Post Office. That was the observation by Mr O’Donavan - with which the Tribunal in this case agrees - to the effect that a person in middle-management, such as the Claimant, with many years of experience and aware of some of the consequences that can arise from a deliberate failure to follow the procedures provided for, must make dismissal a sanction falling within the band of reasonable responses.”
“39. … as regards the admitted “password sharing” that was not the case. Whatever the shortcomings in relation to the allegation touching the video files, as regards the “password sharing” there was little or no investigation needed, since the Claimant had accepted what he had done. 40. There was no substantive or procedural shortcoming in relation to the dismissal for misconduct on the basis of the “password sharing”, and the Tribunal has formed the view that dismissal was a response falling within the band of reasonable responses in respect of that particular offence. 41. It therefore follows that, whilst the Tribunal may think that this was a “harsh” decision, the outcome must be that the dismissal of the Claimant by the Respondent was fair.”
“16. For my part, I find it impossible to read into these cases the proposition that the employer is free from any requirement to act in a reasonable fashion once the alleged misconduct is admitted. Section 98(4) requires the tribunal to determine whether the employer ‘acted reasonably or unreasonably in treating it as a sufficient reason for dismissing the employee’ and further to determine this in accordance with ‘equity and the substantial merits of the case’. This suggests that there are both substantive and procedural elements to the decision to both of which the ‘band of reasonable responses’ test should be applied.”
“(37) … [Mr Miranda] had little to add in respect of the “password sharing” matters other than to state that it was his view that this was such a serious offence that it would warrant a termination of employment even on a first occasion.”
“The Employment Tribunal failed to consider that the dismissing officer, Mr O’Donovan, would not have dismissed for password sharing alone whereas Mr Miranda, the appeals officer, would have done so; this is relevant to the reasonableness of the Respondent in adopting a sanction of dismissal.”