Central Young Men’s Christian Association – €8,700 Fine (United Kingdom, 2024)

€8,700Information Commissioner's Office30 April 2024United Kingdom
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Central Young Men’s Christian Association was fined for sending an email that exposed the email addresses of 166 participants in a sensitive program. This breach could potentially reveal their HIV status. The fine serves as a reminder for organizations to protect personal information in communications.

What happened

The organization sent an email without using the blind copy option, revealing recipients' email addresses.

Who was affected

166 individuals participating in an HIV program were affected by the email exposure.

What the authority found

The Information Commissioner's Office fined the organization for failing to protect personal data under GDPR.

Why this matters

This incident emphasizes the need for organizations to use secure communication methods to protect sensitive information and avoid fines.

GDPR Articles Cited

AI-verified

Art. 5(1)(f) GDPR
Art. 32(1) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 32(1) GDPR
(2) GDPR

Original data from scraper before AI verification against source document.

Source verified 14 March 2026
articles corrected
national law identified
amount discrepancy
date discrepancy
Full Legal Summary
Detailed

The UK DPA (ICO) has fined the Central Young Men’s Christian Association EUR 8,700. The controller had sent an email to individuals participating in a program for individuals suffering from HIV without using the blind copy option, which made the email addresses of all recipients known to other recipients. 166 individuals could be identified or potentially identified based on their email addresses. From this it could be concluded that these people were probably living with HIV.

Related Enforcement Actions (0)

No other enforcement actions found for Central Young Men’s Christian Association in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

30 April 2024

Authority

Information Commissioner's Office

Fine Amount

€8,700

Enforcement Tracker ID

ETid-2317

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Central Young Men’s Christian Association - United Kingdom (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: