The City Council sent an email without blind copy to all non-winning participants in a raffle of tickets, so that all people could access the email address of the other unselected participants, violating the principle of confidentiality (art.5.1.f. RGPD).