Reprimands · Charitable and voluntary
The Central Young Men’s Christian Association
No fineReprimands
Root cause
Misdirected communication
Personal data sent to the wrong recipient — the bcc field, the wrong attachment, the wrong address. Mundane, common, and expensive.
What happened
The Central YMCA sent an email to individuals participating in a programme for people living with HIV using “CC” rather than “BCC”, revealing the email addresses to all recipients. 166 individuals could be identified or potentially identified from their email address. As a result, it could be inferred that these individuals were likely to be living with HIV. The Central YMCA have been fined £7,500 and issued a reprimand.
Summarised from the notice published by the ICO on 6 March 2024. Read the original notice — it is the authoritative version.