Hi Fiona,
DPR is a data protection law that is established to protect the privacy, confidentiality, and integrity of the personal data of citizens of the EU. So, that said if businesses are sending emails with personally identifiable information (PII) then they are required to take all the necessary measures to protect it. So, coming straight to the question of whether sharing an email address may result in a breach? Well, that depends on various factors and conditions.
Firstly, in a scenario where the email id that is shared is a personal one, like a personal Gmail, then in that case it is a data breach.
Visit this link to know more:
www.vistainfosec.com/blog/does-sharing-a...address-breach-gdpr/
Does sharing an email address breach GDPR?
