Hastings Council Data Breach showed how easy it is

The Hastings Council data breach on the eve of the GDPR coming into force showed just how easy the human error element is.

The irony was that the breach involved an email being sent out with an opt-in or opt-out offer for compliance with the new GDPR. They sent the email on the eve of the new rules coming into force. It all seemed very sensible.

That was until it was realised that all the recipients’ information was visible to each other. Yes, that’s right. A GDPR information email was sent out that breached data protection rules itself. It was another simple case of avoidable human error.

The Hastings Council data breach email

The Hastings Council data breach email was sent out on the eve of the GDPR coming into force. The email was intended to ensure that the council complied with the new rules.

Unfortunately, due to human error, all recipients of the email were CC’d into the email. That meant that each recipient’s details was visible to each other.

This was the exact same thing that happened in the huge 56 Dean Street action we’re representing people for.

The Hastings Council data breach was another avoidable breach

With a bit more care, due diligence, training and / or better systems, the Hastings Council data breach was undoubtedly avoidable.

It isn’t hard to ensure that a mass email can be sent out without the recipients’ personal information being breached. In fact, there are systems and mail servers that can do the job for you as well, and they don’t cost a bomb.

A spokesperson for the East Sussex council said:

“This was human error, an apology was immediately sent out afterwards. Our most sincere apologies.”

You could argue this was a lucky escape. Had the Hastings Council data breach occurred on or after the day GDPR came into force, the punishments could be far more severe. Instead, it occurred on the eve of the new rules coming into force.

Are you affected by the Hastings Council data breach?

If you were affected by the Hastings Council data breach, you may be able to claim compensation. You may also be eligible for our No Win, No Fee representation.

Please contact the team for further help and assistance today.

Former manager pleads guilty in Equifax cybersecurity incident

More on how the British Airways data hack was preventable