Talk

Advanced search

To inform estate agent of data breach - customer documents on display in estate agent’s window

(17 Posts)
AdoreTheBeach Sat 27-Jun-20 08:50:05

Yesterday DH and I went to a town we’re interested in moving to. We wanted to see what properties were being advertised, see what the town looked like and if possible, talk to an estate agent (socially distanced of course). Yes, we did find out they’re all closed and it’s now all via email and telephone. We’re mask wearers, have pocket sized hand sanitiser we use regularly.

However, while looking in one estate agent’s window, there on the windowsill below photos of houses for sale, was a customer file. On display, where everyone looking at these photos, would see the file illustrating customer address, phone numbers (home, work, mobile), email, same for buyer. Employment data, house purchase price, mortgage details etc. On the desk just inside, next to the window, there were other folders open with papers illustrating similar data.

I snapped a photo with the intention of emailing to the estate agent to inform them of their GDPR breach and that they need to consider that their shop windows on the high street are viewed by many people passing by and that putting these sensitive papers actually physically on display directly below the for sale property photos is breaching data privacy

I used to work in compliance, data privacy specifically, so I know this is quite serious.

My DH says I should do nothing. I think I should contact the estate agent. A friend I asked, said if it were her data, she’d want to know. I hadn’t thought of contacting the customer (Or seller). I have not done anything thus far.

Thoughts?

Am I unreasonable to consider contacting the estate agent about this so they think about clear desk policy or at least some safeguarding of customer personal data?

OP’s posts: |
letmethinkaboutitfornow Sat 27-Jun-20 08:54:04

Please do report it!
Massive data breach and I would be really pissed off if my data was involved and put on display!

Finfintytint Sat 27-Jun-20 08:54:18

I’d give them a call.

TheGreatWave Sat 27-Jun-20 08:54:21

Just send an email to the EA, the quicker this is resolved the better.

thewinkingprawn Sat 27-Jun-20 08:57:54

Just drop them a line then they can rectify it - it will just be a mistake by someone which they can then put right. I don’t see why it’s even a question of what to do.

TomNook Sat 27-Jun-20 08:59:09

Oh fg. Do you really need to ask

Redleathertrousers Sat 27-Jun-20 08:59:39

Definitely contact them and let them know! That's terrible!

AvoidingRealHumans Sat 27-Jun-20 09:06:52

I wouldn't contact the person who's data was on show but yes, definitely contact the estate agent.

It was obviously a mistake but mustn't happen again, it will do if they haven't realised.

BigBairyHollocks Sat 27-Jun-20 09:08:37

Why would you not tell them? Absolutely give them a call.

AdoreTheBeach Sat 27-Jun-20 09:10:56

Thanks all. Gave them a call and let them know.

OP’s posts: |
adriennewillfly Sat 27-Jun-20 09:11:16

Report to the ICO.

AdoreTheBeach Sat 27-Jun-20 09:11:20

Estate agents, that is.

OP’s posts: |
SionnachGlic Sat 27-Jun-20 09:23:07

Def give them a call...they will be grateful & rectify.

SionnachGlic Sat 27-Jun-20 09:24:22

Sorry...just saw you did! I'm sure they were thankful & someone is getting pulled up...it shouldn't happen again thanks to you!

TSSDNCOP Sat 27-Jun-20 09:44:42

Now you've called them, did you tell them that you have a camera pic of obtained data?

wink

AdoreTheBeach Sun 28-Jun-20 08:35:53

@TSSDNCOP no, I didn’t tell them as I decided to delete the photo prior to calling.

OP’s posts: |
Notupforit Sun 28-Jun-20 08:41:51

If I were you, I'd contact the people too (seeing as you have their details). I was involved in a very serious data breach a couple of years ago and the organisation did absolutely nothing about it. I was in university and sent an email in error that contained all of the exam results for every student prior to the exam results being released. All the university did was "notify" students that there had been a data breach but also stated that no one had accessed or had copies of their data - entirely untrue. You have no idea who could've seen their data or who could be using it, there's nothing to suggest that the Estate Agent will tell them so these people have the right to know so they can try to protect themselves.

Join the discussion

Registering is free, quick, and means you can join in the discussion, watch threads, get discounts, win prizes and lots more.

Get started »