Inappropriate disclosure of personal information on two separate occasions.
The information was sent out in response to a third party Subject Access Request, inappropriately.
Undertaking issued to ensure that staff are made familiar with procedures and policies relating to Subject Access Requests.
Reason for action
Insufficient training combined with a large volume of subject access requests lead to the error.
04 April 2011.