The Information Commissioner's Office (ICO) has issued two reprimands to Northern Irish organisations for breaching email data privacy. The Patient and Client Council (PCC) and the Executive Office reportedly disclosed recipient details through inappropriate group email options rather than using more secure alternatives like mail merge. The PCC used the carbon copy option to email 15 people across Northern Ireland who had lived experience of gender dysphoria, inadvertently allowing recipients to infer that others also had the same experience. The Executive Office's Interim Advocate's Office also sent an e-newsletter to 251 subscribers using the 'to' field, which may have disclosed the email addresses of potential victims and survivors of the Historical Institutional Abuse Inquiry. The ICO warns of the risks associated with inappropriate email options and advocates for the use of more secure methods to protect personal information.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 4,350 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.
