Surrey CC has been fined £120,000 by the Information Commissioner's Office for serious and repeated breaches of the Data Protection Act.
In the gravest lapse, a member of staff working in adult social care e-mailed a file containing sensitive personal information relating to the physical and mental health and welfare of 241 vulnerable individuals to the wrong group address list.
