Tweeddale revealed Crichton to other staff as the source of allegations of drug abuse at work, which left Crichton fearful of retaliation as some of his colleagues had a history of violence, imprisonment, and drug use.
Tweeddale also later accused Crichton, in front of colleagues, of creating trouble in the workplace. While some TD Drilling employees failed drug tests, no action was taken against them.
The Privacy Commissioner became involved when TD Drilling first withheld and then claimed to have lost employment information relevant to its employment dispute with Crichton, claiming the records were lost in an office move.
"Looking after employee information is a basic and important responsibility for all employers," the statement from the office of the privacy commissioner said.
"It was especially so in this case, as there was a serious employment dispute.
"It is our view there was serious negligence or even recklessness in how this information and the information request was treated when a dispute arose.
"We note TD Drilling acted poorly throughout, including its behaviour that resulted in the employment dispute, and its subsequent behaviour throughout our investigation" and had not responded to offers an opportunity to comment.
"Our investigations are almost always confidential, but we considered applying our naming policy to publicly identify the company in order highlight bad practice, and to remind small businesses that they too have privacy obligations towards their employees.
"We remain concerned about the security of personal information of other employees in the company."