is this a breach of data protection?

[spiffysquiffyspiggy]

I've just discovered records of trade union membership for my local branch online. It provides my full name, work address, gender, date I joined the union and the parliamentary constituency I live in.

I'm uncomfortable with that information being available online, but more concerned for someone i know
that had moved to escape an abusive relationship- I don't think they would want any suggestion of where they now live to be available via google.

Does anyone know if this would be a breach of the dpa?

[Parietal]

my company keeps data under the DPA and we certainly wouldn't be allowed to do that. but I'm not a lawyer so don't know the detail.

[PigeonPie]

I think you should refer it to the Information Commissioner's Office - ico.org.uk/

[MaryMotherOfCheeses]

It sounds very odd.

Do other branches show the same information online? Sounds like a major cock up to me.

Can you google the person who escaped the abusive relationship? If that comes up, I would alert the person and suggest they contact the branch immediately. I hope it's taken down immediately.

[Mrsmorton]

I'm a dentist and the GDC says we have to have our address online, plus Mrs or Miss (marital status) and the date we joined the register.

I think it depends on why they have it published, apparently ours is for the protection of the public. I would certainly expect to be told that my details would be published but I don't think it's a breach by default.

[SolomanDaisy]

Yes, it is likely to be a breach of the DPA, unless you have signed something to agree to this being published. Inform the union and the ICO.

[2tired2bewitty]

I've just shown your post to DH who works in data protection, he says depending a bit on what you might have agreed to on signing up, it is likely a very significant breach and should be reported to the data commissioner as mentioned above.

[spiffysquiffyspiggy]

I alerted my rep today, who promptly went "shit, shit, shit, shit" so it definitely wasn't meant to be available on the internet. I did a bit more poking about last night after I posted, it wasn't just my branch, it was thousands of names from across the country- some of whom have sensitive job roles so would not be happy.

I spoke to the individual I was most concerned about so she's aware and our reps have tried to contact everyone to let then know. Not sure if other branches have been told yet. It seems to have been a fairly major cock up. They've partially fixed the problem, although some data (names) shows in the extract, you can no longer download the report with the detail in.

Wonder how long it would have been open for if I hadn't idly googled something random and spotted it