Our client contacted us regarding an internal data breach within Shrewsbury hospital where a relative of theirs, who worked at the hospital had accessed and viewed their personal medical records on the hospital systems.

This was later confirmed by the hospital upon email, stating that our client other members of her family had all been a victim of a data breach, as their medical records had been accessed on multiple occasions by the relative in question.

Although it was a close relative to have accessed the medical details, this violation of privacy is still not acceptable without our clients consent, breaching GDPR laws within a workplace.

Our client did attend a meeting surrounding this breach, where they were offered counselling which heightened the severity and the loss of control they had on their own personal records.

Due to the lack of GDPR and the distress this breach has caused within our clients family; our client decided to proceed with a data breach claim with Angelus Law to act on their behalf as their solicitor to proceed with a data breach claim for the family of 7.

The settlement conclusion compensated our client £15,000 which was split between the family of 7.