That's just plain incorrect. Under Data Protection rules, they should probably destroy his bank account details but that's about it. You are definetely allowed to announce why people have been sacked. Look in the paper today, there will be details of people being sacked