Aneurin Bevan University Health Board

Mr A complained that the Health Board had disclosed a confidential letter. He further complained about the Health Board’s handling of his complaint.

The Ombudsman found that although Mr A had complained to the Health Board, it had dealt with the matter in terms of the data breach only. Responses were provided on behalf of the Health Board’s Information Governance Unit but the Health Board had not considered Mr A’s concerns about the effect of the data breach and/or any safeguarding issues that occurred as a result. This caused frustration and uncertainty for Mr A. She decided to settle the complaint without an investigation.

The Ombudsman sought and gained the Health Board’s agreement to provide Mr A with a written apology and response within 2 weeks.