NHS Highland reprimand for HIV patient email data breach

NHS Highland has been reproached by the Information Commissioner’s Office for a data breach that exposed personal email addresses of HIV service users. The breach occurred when the health board used CC instead of BCC, allowing all recipients to see other people’s addresses. The incident, which notably revealed a serious trust violation, led to recommendations for improved data protection safeguards.