Guernsey's government is being reprimanded for the revealing personal data of an employee of the Policy and Resources Committee.
The Data Protection Authority within the Bailiwick, has found that a manager at the Committee disclosed the health status of an employee in an email sent to several people.
A formal complaint was issued by the individual after they said they were left with 'considerable distress' and concerned about the impact on any future employment opportunities.
The Data Protection Authority says there was no legal basis for the Committee to disclose the information, which resulted in them failing to comply with the law.
Information relating to the health of employees is given higher protection under the law, with the Authority saying those that do not safeguard the data seriously will face the appropriate sanction.