ICO fines transgender charity for data protection breach exposing sensitive personal data

It also noted that Mermaids’ staff and volunteers received mandatory data protection training in December 2018, which is updated annually, but that training was “inadequate and/or ineffective”