[England] Manager uploaded my private and personal 121 meeting notes onto the world intranet for everyone to see

I found out that my 121 meeting notes from my meeting with my manager have been visible on works intranet for anyone to read for over a year. My manager has somehow uploaded mine and another colleague's notes. My notes contained person stuff relating to ADHD, autism, occupational health, reasonable adjustments, sickness absences and personal family things. After Informing a manger of this I then found they had then deleted another file which was titled using my name and within the document was my dob, address and mobile number. So there was 2 documents with basically all my sensitive data just in the open for anyone to read. The documents weren't permanently deleted after I had reported them as they merely went in the shared drives recycle bin were they could be restored and viewed again by anyone.

I have worked for this organisation for 4 years within England.

What's my best course of action