Authority
ICO
Country
United Kingdom
Date Issued
February 25, 2024
Industry
Government
Summary
The UK Ministry of Defence inadvertently disclosed 265 email addresses by sending emails using the 'To' field instead of 'BCC', violating GDPR Article 5(1)(f) on data security and confidentiality. The ICO imposed a £350,000 fine for this breach of security obligations.
Violation Types
SecurityData BreachData Subject Rights
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert