A London Gender Identity Clinic has mistakenly exposed the details of more than 900 people, some of whom are patients at the Clinic. Given the nature of the treatment provided at this Clinic, the personal details exposed could lead to the identification of individuals which may be highly distressing for those involved. The law in relation to upset and distress caused by data breaches was recently clarified with the coming into force of the Data Protection Act 2018, which implemented the EU’s General Data Protection Regulations. It is now possible to seek damages for upset and distress caused as a result of a breach of the Data Protection Act. In the Healthcare context, unauthorised disclosure of personal information can be highly distressing.
At O’Reilly Stewart Healthcare, we already act on behalf of numerous patients adversely affected by data breaches in the healthcare context. We have successfully recovered damages for such clients in the past. If you or a family member has been affected by any unauthorised disclosure which has caused distress, please do not hesitate to contact us.