Not necessarily an AIBU, I’m just posting here for traffic!
I recently moved into a new private rental within a large block of flats. Some weeks ago I found out that there needs to be work carried out on the building and everyone who lives within a certain side of the building will have a surveyor who needs access to the flats.
Today I received an email from a member of the Tenants Association regarding the surveyors availability and instead of sending the email via BCC. He’s CC’d at least 50 tenants all into one email. That’s 50 strangers (yes we live in the same building but do we need access to each other’s email addresses without consent? I don’t think so) whose personal data have been shared just like that.
Some people have already replied asking why their email address has been shared with others and I’m wondering the same thing. I’m sure people may think, ‘well it’s hardly the end of the world if people have your email address’ but I don’t think other tenants should have access to it in the first place. Is this a breach of GDPR? Do organisations like a Tenants Association Group need to protect people’s data the same way that larger businesses do?
I’m not going to do anything about it but I just wondered whether they’re in the wrong or not tbh