Paternity test result sent to the wrong address [2009] IEDPC 12 (2009)

Paternity test result sent to the wrong address [2009] IEDPC 12 (2009)

The data controller breached its obligations under the Data Protection Acts by failing to double-check manual address entry, resulting in disclosure of sensitive personal data.

Citation
[2009] IEDPC 12
Parties
Applicant: Complainant (individual affected by disclosure); Respondent: Data controller (paternity testing service provider)
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Investigation and Resolution
Outcome
Complaint resolved amicably with apology and full refund.
Legal Topics
Disclosure of Sensitive Personal Data, Manual Processing Error, Medical Data Confidentiality
Data Protection Privacy Law Disclosure of Sensitive Personal Data Manual Processing Error Medical Data Confidentiality

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 1 Authorities cited 1 Party arguments 2 Amounts and remedies 1
Sign in to unlock

Parties

Complainant (individual affected by disclosure)

Applicant

Data controller (paternity testing service provider)

Respondent

Procedural Posture

Data Protection Complaint / Investigation and Resolution

Legal Issues

  1. 1 Was there a breach of the Data Protection Acts 1988 and 2003 due to disclosure of sensitive personal data?
  2. 2 Did the data controller fail to implement adequate safeguards when manual processing replaced electronic systems?

Ratio Decidendi

The data controller breached its obligations under the Data Protection Acts by failing to double-check manual address entry, resulting in disclosure of sensitive personal data.

Court Disposition

Complaint resolved amicably with apology and full refund.

Orders

  • Data controller to provide full refund to complainant.
  • Data controller to review manual processes for addressing sensitive correspondence.