Parents complained through a lawyer that the school sent a vaccination-compliance reminder to about 37 families with all addresses visible, revealing which children were not in order. The school notified a data breach, retrained staff, and asked the software house that supplies its email program to add a warning whenever several recipients are entered. The Italian Data Protection Authority (Garante) found an unlawful communication of health data and fined the school EUR 1,000. The family first noticed. Responses acted on the school and, through its request, the vendor’s tool. Whether the vendor added the warning is not stated in source.