Mediator sent us wrong couples total financial disclosure

[Trayble]

As the title says really.

Was sent several forms as we’ve come to end of our discussions and she’s obviously attached another couples financial spreadsheet to the emails with the same surname.

She’s been a bit flaky and disorganised throughout this process but as if you wouldn’t check something as important as this. I feel cross on behalf of the other couple it has their full names and addresses on, salary info, pension details, bank names and balances (no account numbers), debt and asset info.

Of all the emails and forms to get mixed up it is without doubt the worse one as regards data protection. I’ve emailed and she’s apologised and said she hasn’t sent our info to this other couple but do I report the incident to her firm or just delete the email and do nothing?

I think you should report it. How many times has she done it before?

Surely such personal and important info should have been sent encripted with a password in a seperate email? Despite what she says, you don't know that she didnt actally send YOUR info to others.

I'd let the company know. Especially as it doesn't sound like she was organised at all.

Don’t be awful - we all make mistakes. Just delete it and move on.

I think she just made a genuine mistake. Just delete it.

It's a GDPR breech and has to be reported by the data controller of the company.

*breach

Well technically it’s a breach, but we all make mistakes etc particularly in this crazy world!!!

Report it. It's a massive breach of privacy and they need to have better systems in place.

what will u gain from reporting her ?
she is probably devastated she has fine this and worrying for her job
move on

This kind if error us not acceptable. You should report it to the company concerned. They need to follow their GDPR data breach protocols.

My Mediation was awful, absolute horrendous experience.

Absolutely report it. Not acceptable at all. As pp said, the sheets should have been password protected.

Mistakes happen of course, but spelling a name wrong, or forgetting a phone call. Not actual data breaches.

I’ve made some spectacular fuck ups at work, but I had to own them.

Report, it won’t get better unless you do.

Oh god, someone sent me their P60 to complete their tax return but instead, because his HR dept had sent him everyone in the organisations P60s, he then sent all those onto me. So a 450 page pdf rather than single.

Massive breach.

Report it. Not for revenge but there need to be better processes in place if there aren’t already and she needs to follow them if they are. Something similar happened to me and the ICO were very clear that this wasn’t acceptable - I ended up going to them as the firm in question fobbed me off and told me it was not an issue (my similar details went to others involved in a legal case) when it very clearly was.

Mistake do happen, but it should still be reported so lessons can be learnt.

I would be more concerned about that they of personal info being in an unprotected file though.

A mix of opinions then.

I don’t want to set out to get her in trouble but think that others are right in that reporting it might change the processes of how they go about sending them out.

There's obviously a control missing somewhere or not working correctly. I'd report it so a root cause analysis can be done.

She ought to report it herself, so you will only be "getting her into trouble" if she hasn't done so.

That's a very serious breach OP. Please report, if she has done so herself you are making nothing worse, and if she hasn't, then she really needs a chat with the ICO.

ico.org.uk/make-a-complaint/your-personal-information-concerns/

If she's mishandled their data, she could have done the same with yours.

Yes, report her. Massive breach in GDPR. She may not know she’s done it if she’s ‘flaky’. Also, this may not be the first time.