Client lists are, by their very nature, likely to contain personally identifiable information protected by the Data Protection Act. The employer must comply with the eight principles under the DPA including ensuring that the data is processed fairly and lawfully and is protected against accidental loss or destruction. These obligations also apply to an outgoing employee.
Source: Hey cloud lawyer: Can I take my client list with me?
