A monetary penalty notice for £90,000 has been served on Central London Community Healthcare NHS Trust for a serious contravention of the DPA, which occurred when sensitive personal data was faxed to an incorrect and unidentified number. The contravention was repeated on 45 occassions over a number of weeks and compromised 59 data subjects' personal data.
Appeal dismissed the Upper Tribunal-™s ruling: [2013] UKUT 551 (AAC)