the Treatment Benefit MyWelfare site allowed practitioners to access customer data belonging to other practitioners. (Case #60, 2024) Specifically, I request: 1. Incident Details: - All internal reports, emails, or memos discussing how this error occurred. - Any records detailing the actions taken to roll back the update and address the breach. 2. Risk Assessment and Communications: - Internal communications or documentation assessing the risk level of this breach and explaining why affected customers were not notified. - Any communications with the Data Protection Commission (DPC) regarding this breach, including reports submitted and responses received. 3. Policy or Process Changes: - Records of any changes to internal policies or processes for the Treatment Benefit Scheme or MyWelfare updates as a result of this incident.