Outcomes - Selected Case Summaries

Erroneous group email sent by financial service provider

Informal Resolution | 26 November 2019

A financial services company informed us they had inappropriately disclosed the names and email addresses of 49 of their clients via a group email sent to those clients. Instead of sending individual emails, or utilizing the blind carbon copy function, the recipients’ names and addresses were visible to all who received the email.  The data subjects were notified of the incident and advised to delete the email immediately.  The deletion was confirmed.

After further advice was provided, the case was closed as there appeared to be no evidence of prejudice to the rights of the clients whose data was exposed.