To report this?

[DefensiveMagpie]

I have recently been referred to an online health service by my GP.

The service e-mail you with initial information and links to register online to use their resources. The e-mails come from an individual rather than a generic address.

They have forwarded me an e-mail chain from a different patient which includes their personal details, e-mail address and a couple of messages back and forth with the provider.

I think I need to report this somehow but not sure who to? Or would you ignore and delete?

That is a major data breach. Report it to the practice directly.

Practice Manager

Mistakes happen but this is sloppy and they should have a process in place to stop this happening. Maybe they’ve gotten to comfortable with their processes and need a wake up call.

I would report it to the practice manager and ask for an update on what they have done to prevent it happening again.

I thought about the practice manager however the e-mails etc came from the service I was referred to, not from the GP/practice itself.

You could go straight to the ICO on this.

General enquiries
If you're not able to find the answer to your question on the website, call the ICO helpline on 0303 123 1113 or use our live chat service.