Authority
ICO
Country
United Kingdom
Date Issued
March 5, 2024
Industry
Hospitality
Summary
The Central YMCA disclosed the email addresses of 166 individuals participating an HIV support programme by using CC instead of BCC in a group email, potentially revealing participants' health status and sensitive personal information. The organization was fined £7,500 and reprimanded for this security and data protection failure.
Violation Types
Data BreachTransparencySecurity
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert