Reprimands · Health
The Patient and Client Council
No fineReprimands
Root cause
Misdirected communication
Personal data sent to the wrong recipient — the bcc field, the wrong attachment, the wrong address. Mundane, common, and expensive.
What happened
A reprimand has been issued to The Patient and Client Council in relation to infringements of Article 5 (1)(f) and Article 32 (1) of the UK GDPR. The infringements were identified following an investigation into the disclosure of special category due to an email sent to 15 individuals using carbon copy (CC) rather than blind carbon copy (BCC).
Summarised from the notice published by the ICO on 19 July 2023. Read the original notice — it is the authoritative version.