- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
The Patient and Client Council – Reprimand (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Patient and Client Council received a reprimand for improperly sharing sensitive information in an email. This incident highlights the importance of using secure methods when sending personal data to protect individuals' privacy.
What happened
The Patient and Client Council sent an email disclosing sensitive information to multiple recipients without using blind carbon copy.
Who was affected
Individuals whose sensitive information was disclosed inappropriately by The Patient and Client Council.
What the authority found
The Information Commissioner's Office reprimanded The Patient and Client Council for failing to protect sensitive data according to GDPR rules.
Why this matters
This case underscores the need for organizations to use secure emailing practices to safeguard personal information and comply with data protection regulations.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A reprimand has been issued to The Patient and Client Council in relation to infringements of Article 5 (1)(f) and Article 32 (1) of the UK GDPR. The infringements were identified following an investigation into the disclosure of special category due to an email sent to 15 individuals using carbon copy (CC) rather than blind carbon copy (BCC).
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for The Patient and Client Council in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
19 July 2023
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. The Patient and Client Council - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: