What
Inappropriate disclosure of personal information on two separate occasions.
How much
Two records.
Why
The information was sent out in response to a third party Subject Access Request, inappropriately.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that staff are made familiar with procedures and policies relating to Subject Access Requests.
Reason for action
Insufficient training combined with a large volume of subject access requests lead to the error.
When
04 April 2011.
Links
View PDF of the Royal Cornwall Hospitals NHS Trust Undertaking (Via ICO Website)
View PDF of the Royal Cornwall Hospitals NHS Trust Undertaking (Breach Watch Archive)