Care plan sent to What'sApp group

[NameChanger43]

Please tell me if this is outrageous or I'm way over thinking this. I don't want to be outting too much! I work in Healthcare caring for about 40ish people in a residential setting. A new person is coming to stay and their entire care plan was sent over a what'sapp group of about 50 people not all of who would be involved in their care. Notes included:

Full name
DOB
Address
Full and detailed medical history and medication
Incontinence care
Family and relationships
Behaviour
Money management and how they are being funded
Personal care
End of life/last wishes
Mental capacity... and much more

I know the importance of everyone knowing these details butsurely whatsapp is not secure. If my phone was stolen or lost anyone could read that (i do have a password).

How would you feel if this was your mum/dad/relative?

@InFiveMins and there in one post is the reason GDPR had to be brought in. To stop people using scare tactics to cover mistakes that impact others lives.
My coworkers and I were whistle blowers. Didn't work out well for us. But we protected our clients and would do it again in a heartbeat, though with our eyes opened as to what the consequences will be.
I hope your reporting goes as well as possible OP.

It's highly unlikely someone would lose their job for a single mistake like this, it should be seen as a training issue for staff and an overhaul of policy.

People need to be able to own up to mistakes, the alternative encourages people to cover things up and compound an already bad situation.

You are doing the right thing. My company deals with vast amounts of medical data. Only myself and my husband have access to everything, any outsourcing such as typing services is sent via password protected emails.

Anything not password protected we may send is anonymised, I wouldn't even use a first name in a text/WhatsApp with my husband.

Some people forget due to being in an industry for a long time, that it isn't normal to know so many intimate and private details about another person. Protecting personal data is paramount. Our children can't even access our home office under any circumstances.