Discovery

On the 6^th September 2019, the Claimant received a group email from the NHS Trust Gender Identity Clinic, regarding an Art project. The said email exposed individual patients’ email addresses as the NHS failed to blind copy them in.

This left the Claimant feeling distressed and heavily let down by the NHS’s actions and so feared that he would be identified and contacted as a result of the breach due his email address containing his name.

Representation

The Claimant went on to lodge a complaint and the NHS admitted their data breach; recognising how serious it was and confirmed they had self-reported the incident to the Information Commissioner.  The Claimant then decided to instruct the specialist team at Irvings Law to represent him in his data breach claim.

A formal Letter of Claim setting out the incident circumstances and causes of action was sent to the NHS. This was on the basis that they had breached their obligations under the Data Protection Act 2018, the General Data Protection Regulations 2018 (GDPR) and also the Human Rights Act 1998.

Resolution

In response, the NHS apologised and after negotiations, the Claimant settled his claim for £3,500 plus legal costs.

If you have been affected by a breach of any kind, please get in touch and a member of our specialist team will be in contact.