Date Issued

2022-06-09

Authority

UK ICO

Country

United Kingdom

Violation Type

other

Currency

GBP

Violation Summary

Between the period 25 May 2018 to 6 September 2019, the Trust used Outlook to send bulk emails to 1,781 Gender Identity Clinic service users. The Trust failed to comply with Chapter II GDPR, specifically Articles 5(1)(f), and 32(1) & (2).