An administrative assistant at a high school in Italy made a selection error on the school’s electronic registry portal, accidentally publishing a confidential meeting notice to all parents of a class instead of only the target student’s parents. As a result, the female student’s sensitive personal and health-related data, including her special education status and references to her Individualized Education Plan (PEI), were exposed to the families of all her classmates for several days. Following an investigation, the Italian Data Protection Authority (Garante Privacy) formally admonished the school for the unauthorized disclosure of health data.