An undertaking to comply with the seventh data protection principle has been signed by the Aneurin Bevan Health Board. This follows an incident where a sensitive report - containing explicit details relating to a patient's health - was sent to the wrong person. This breach was also the subject of a monetary penalty.