Data breach

[Sueblue18]

Hi everyone


I was notified by a family member who I don't really speak with, from what I can gather she has been waiting for her child's ehcp decision and she checked her email to find the ehcp review board had made their decision
but the letter she got wasn't for her or her child
it was actually my sons ehcp decision from last year when she opened it
She got my number off my mum and sent me all the information
So far the local authority is denying this and saying it isn't possible
Well it is because I'm staring at mine and my child's details what came from this women's number and she sent it via pdf to my WhatsApp
My child was awarded the ehcp in February this year
no one really knows within the family because we don't feel it needs to be known
This is the second time they have breached my data
I did get a small sum of money from the first breach
but I'm worried if I take this complaint further with this type of breach then it may effect the ehcp
I dont think it would result in compensation
but I'm here needing advice should I just leave this
or should I carry on to take it further
any help is appreciated
Thank you

[atticus]

www.ico.org.uk

[PallasAthena]

You should definitely take it further. This is a serious data breach by your local council. Quite apart from the impact on you they need to understand what went wrong to stop it happening again.

Don't be fobbed off by the council's EHCP team denials. All councils must by law have a formal complaints procedure including for data protection issues. This must be set out on their website. So put in a formal complaint. Follow the procedure set out on their website.

The ICO website gives general advice on making complaints about data breaches. If you do not get a satisfactory outcome from the council you can make a report to the ICO but ICO expect you to have gone through the council's full complaints procedure before they will get involved