# DATA BREACH COMPENSATION CLAIM
Date: 11 March 2036
Parties: Sofia Williams and Harbour Health Club Ltd
## 1. Purpose and parties
Harbour Health Club Ltd notified me on 20 February 2036 that an email containing my name, address, membership number and medical access requirements had been sent to 43 members. I had provided the information for membership administration and had not consented to that disclosure.
## 2. Facts, scope and terms
I experienced sustained distress and spent £186.40 replacing a lock and monitoring accounts after the disclosure. I do not claim that the incident automatically proves a compensable sum; I ask the controller to assess the evidence, the UK GDPR obligations and the Data Protection Act 2018 position.
## 3. Process and responsibilities
Please preserve the incident report, access logs, recipient list, risk assessment, notification and remedial training records. Please identify the proposed compensation, complaint route and any ICO correspondence within 30 days; this letter does not waive regulatory or court rights.
## 4. Evidence, records and safeguards
The parties should retain the relevant contract, notice, invoices, records and correspondence, and restrict access to personal or confidential information to those who need it. The stated amounts and dates are fictional worked-example facts and require checking against source records.
## 5. Review, escalation and outcome
If the issue is not resolved, the parties should identify the appropriate next step, which may include an internal process, mediation, court or regulator. Silence or part performance is not treated as acceptance or waiver.
## 6. Reservations and practical protections
This document is a general fictional example, not individual legal advice and not a guarantee of eligibility, liability or outcome. Where necessary, an independent professional should check the facts and current law.
## 7. England and Wales law and completion
This completed fictional sample is made on the date above under the law of England and Wales and subject to mandatory protections. It does not exclude any right, liability or remedy that cannot lawfully be excluded.