Banks' auditing of employees

[pollyglot]

I hope that this is the right place to post this. My DS's ex wife, following a bitter separation, is with a new partner, and the two of them are doing everything they can to create chaos in his life. He has just discovered that the new partner, who works in the same bank that DS uses, has been illegally accessing his accounts and his personal information. He has definite proof. DS obviously has begun proceedings to have his accounts audited, to go further with the matter, but the ex-wife has always hated both my DH and me, for no reason that I can fathom, and will likely have encouraged him to snoop into our affairs. Can I request an audit, despite no evidence? Or will they laugh us out of the doors? We're all pretty shaken by the betrayal by DS' ex.

Has he made the bank aware that he knows he believes who has been looking at his accounts? If the staff member in question is checked then all the activity he has made will be checked for validity.

you essentially have nothing to lose by asking, either way this member of staff is likely to be dismissed.

I would say it’s fine to request an audit. It’s very easy for the bank to do and if they are already doing the audit on the back of your DSs complaint they will likely do investigate all her activity.

if you have reasonable suspicion, tell the bank exactly why you are requesting a review of your account access activity. If no good response from bank, you could report the info commissioners office (ICO) where you can make a data protection complaint but you should be pretty sure she has done this.
If evidence is found, they will be fired. Banks won’t tolerate this.

You have a right under data protection rules to see if the employee has been accessing your account information so should write a formal subject access request.
https://ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request/

I would ask direct questions,
If & when & what he accessed and if the bank had proven the partner has a business need to access your data.
I would direct the letter to whom ever is dealing with your sons data breach.
Assuming that you have had no professional contact with the partner they will be able to track whos ID was used and if the partners ID was used it becomes a problem for the bank