NHS Highland reprimand for HIV patient email data breach
NHS Highland has been reprimanded for a data breach revealing the personal email addresses of 37 people invited to use its HIV services. The health board mistakenly used the “cc” function instead of “bcc” in an email, allowing all recipients to see the others’ contact information. The Information Commissioner’s Office (ICO) declared this a “serious breach of trust”. NHS Highland expressed regret for the mishap, confirming new security measures have been put in place.