The respondent is a limited company which provides domiciliary care services in the community. The claimant had been employed as a Care Assistant and later as a Team Leader until he resigned. He commenced a period of sick leave due to depression.  A number of ‘welfare meetings’ were held to ascertain the claimant’s state of health. Later, an email was sent by one of the Directors to another employee containing information about the claimant being a patient at a particular hospital. The claimant alleged that this breached confidentiality and disclosed his personal data in breach of data protection legislation. The respondent initially accepted this, and disciplinary action was taken. The Director involved subsequently undertook training in relation to