To BCC or not to BCC – that is the question data watchdog wants answered

The ICO has warned organisations about numerous personal-data breaches resulting from incorrect use of email recipient fields (To/CC instead of BCC), highlighting case studies — including an NHS trust, a charity and a £350K MOD fine — and advising staff training, email system safeguards (warnings, send delays, disable autocomplete) and consideration of alternatives to email for sharing sensitive information.