The breach described in the post is already ace of the worst breaches of 2020 in my opinion. It’s 2020 and yet we are allay seeing privacy breaches involving very sensitive data due to an email gaffe. From media coverage, it is likely that a newsletter that was sent out put recipients’ email addresses in the cc: field instead of the bcc: field. as a result, multitude who responded to an inquiry into historical institutional revilement to apply for compensation have learned that their email addresses (and hence, in some cases their names or family names) have been exposed to other survivors. Some of the recipients are likely the survivors of institutional abuse. Others may be their spouses, partners, or survivors. More information about the inquiry and compensation program can be found in the government’s FAQ. And of course, one can find a privacy notice about data protection under the GDPR. RTÉ reports about the breach: The identities of 150 survivors of historical institutional insult in Northern ireland have been exposed in a data breach, it has been confirmed. A newsletter was circulated in an email by the HIA meanwhile Advocate’s office on Friday which revealed the names of recipients in error. Read more on RTÉ. mention that BBC reports that the number affected is 250, and that multitude are (understandably) shattered and discompose by this breach. And no, i have no idea how you mitigate this for anyone who mightiness live horrified that they have been “outed” as an contumely survivor if they wanted that kept private — and some of them had reportedly never disclosed their history of insult to their have families. Northern Ireland’s interim victims pleader Brendan McAllister won’t resign over this breach, and some of the survivors impacted it are in the outgrowth of initiating litigation in the High court as well as a complaint to the ICO.