Case study: Communication system provider
Errors in how we communicate can result in the accidental misdirection of emails and other messages. Under the UK GDPR, an individual whose personal data has been disclosed to an unexpected recipient has the right to make a claim for compensation, where distress or damage is caused by the disclosure.
The UK common law provides a variety of further bases for litigation where information is alleged to have been mishandled, including breach of confidence, negligence, misuse of personal information and (where a public authority is involved) breach of human rights.
Organisations facing such claims must take swift action to assess and either defend or settle those actions before costs mount, particularly if there is a risk of action from a group of affected individuals.
