Please or to access all these features

AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Gdpr breach at work?

187 replies

Ereerenownow · 08/03/2025 09:32

I've written on here a couple of times about issues at work but now a new problem has arisen, I think.
I an a private person and don't for example celebrate my birthday at work (though I obviously have a great time with friends and family).
Our office is big and busy and many people from different departments hot desk there. One young girl who uses our space has vague links to nhs via her community counselling work. She isn't employed by the nhs but has the logo on her lanyard as well as her charity's logo.
We are relatively friendly and have often chatted briefly in the kitchen while making a cuppa etc. One time she asked my age and birthday and i very politely said that i don't discuss those things at work. It was no big deal and we moved on to talk about other things.
Well this week she approached me with a wink and said, I know how old you are and you look great for your age and I'll give you a card on your birthday now.
I haven't told anyone else in the team my birthday and I don't believe myself and this lady have any friends in common...I am not on any social media.
I suspect she has access to at least some nhs files and databases and I'm worried that she has used her logins to access my records.
She's lovely but quite gossipy and I think she's capable of telling others in my team.
She also very vaguely alluded to a recent health issue I've had but didn't tell anyone about.
I admit given recent events at work, I'm slightly sensitive so I don't want to cause any problems if non exist.
Can I check to see if she's accessed my private nhs records? Am I just being paranoid?

OP posts:
IBSisBS · 08/03/2025 10:19

Ereerenownow · 08/03/2025 09:54

Would they give her this info?

They might, on our HR system where we book our holidays, it has a shared calendar and it has who is on leave, birthdays (not dob) and work anniversaries.

She could of said she was making a birthday calendar to celebrate her colleagues, and someone in HR has given her a list but included the year of birth not just the date and month

crocheteveryday · 08/03/2025 10:18

I'd ask her again. Give her a chance to explain. You are potentially making a very serious accusation so please be sure before you take this further. If she has looked up your information then that shouldn't be ignored.

whatflite · 08/03/2025 10:15

Maybe she made a point to find out (who knows how) because you were so weird about it?

DrunkPuppy · 08/03/2025 10:14

You're both weird. You're completely weird for making a point not to tell people how old you are, it's not really 'personal info' it's just normal office chit chat, and she's weird to be looking it up. Only her weirdness has potentially crossed a serious line though and you should report if you think she's been accessing your info that she shouldn't.

RunAwayTurnAwayRunAwayTurnAway · 08/03/2025 10:13

OP’s colleague sounds deranged.

Penguinmouse · 08/03/2025 10:13
  1. Doesn’t matter why you don’t want to tell people when your birthday is, that’s your personal information. 2) her demeanour indicates that she got it by improper means. I would report to the DPO to investigate. Alternatively you can say to her - “I didn’t appreciate your comment about knowing my date of birth, I’d like to know how you found that out so I can make sure that information remains private” and see what she says.

to me it’s really obvious she’s looked you up which is an obvious data breach!

burnoutbabe · 08/03/2025 10:13

Darkclothes · 08/03/2025 10:12

Have you ever been registered with companies house? That has a DOB on it.
Electoral roll?

Googled your name and see what comes up?

Edited

Doesn't that just show month /year?

skilpadde · 08/03/2025 10:12

Ereerenownow · 08/03/2025 09:54

Would they give her this info?

They wouldn’t share this info.

Darkclothes · 08/03/2025 10:12

Have you ever been registered with companies house? That has a DOB on it.
Electoral roll?

Googled your name and see what comes up?

locket2009 · 08/03/2025 10:10

The

voubledision · 08/03/2025 10:09

If and when she gives you a birthday card I would ask her outright how she knows, then explain to her that if she's broken GDPR rules she may face disciplinary action.

Femb0t · 08/03/2025 10:08

Well surely your line manager knows when your birthday is as it'll be in your HR records.

Maybe she just asked and your line manager told her, not knowing you want it to be such a big secret...

LauraNorda · 08/03/2025 10:03

MrsBennetsPoorNerves · 08/03/2025 09:50

This whole thing is so weird.

Firstly, your weird coyness about saying when your birthday is. I mean, it's your information so your choice, but even if you don't fancy sharing your name, I can't see why your birthday is such a big secret.

And then there is the question of why any colleague would give enough of a shit to go away and try to find out?! If I asked a colleague when their birthday was and they refused to tell me, I might think they were a bit odd but I would just shrug and forget about it. I certainly couldn't be arsed to go digging for the information.

There may well be a data breach here, so I understand you wanting to find out, but quite honestly, the whole situation is really bizarre to me!

Many organisations use your date of birth as 'security' questions. You can't change it and all your family and friends, past and present usually know it.

Tagyoureit · 08/03/2025 10:02

How bizarre that you couldn't simply say my birthday in July or whatever.

I think I'd go back to this woman and just ask her. Say it's been playing on your mind and it's made you feel very uncomfortable that she's done some digging on you and your personal information.

HelenWheels · 08/03/2025 09:59

Ereerenownow · 08/03/2025 09:57

Thank you, I might at least do some digging around to see what nhs access she has

i wouldnt bother

Ereerenownow · 08/03/2025 09:57

HelenWheels · 08/03/2025 09:56

dont tell her but do report her

Thank you, I might at least do some digging around to see what nhs access she has

OP posts:
Ereerenownow · 08/03/2025 09:56

HelenWheels · 08/03/2025 09:55

she sounds really weird and intrusive

She's always been quite nice. Not even sure why she would be interested to know this info

OP posts:
HelenWheels · 08/03/2025 09:56

dont tell her but do report her

Ereerenownow · 08/03/2025 09:55

HelpMeGetThrough · 08/03/2025 09:50

Thanks, I did and she said 'she had her way'..should have mentioned that in my opening message

If that's what she said, my response would have been, "well it sounds like you've accessed something you shouldn't, so let's hope for your sake you haven't as I am now going to take this further."

Yeah, felt a bit afraid to say this in case she got her info elsewhere...also given previous issues of me getting blamed for things I didn't do

OP posts:
ThinWomansBrain · 08/03/2025 09:55

report the matter to the charity she works/volunteers for

HelenWheels · 08/03/2025 09:55

she sounds really weird and intrusive

Ereerenownow · 08/03/2025 09:54

HelenWheels · 08/03/2025 09:50

perhaps she got the info from HR

Would they give her this info?

OP posts:
Ereerenownow · 08/03/2025 09:53

MrsBennetsPoorNerves · 08/03/2025 09:50

This whole thing is so weird.

Firstly, your weird coyness about saying when your birthday is. I mean, it's your information so your choice, but even if you don't fancy sharing your name, I can't see why your birthday is such a big secret.

And then there is the question of why any colleague would give enough of a shit to go away and try to find out?! If I asked a colleague when their birthday was and they refused to tell me, I might think they were a bit odd but I would just shrug and forget about it. I certainly couldn't be arsed to go digging for the information.

There may well be a data breach here, so I understand you wanting to find out, but quite honestly, the whole situation is really bizarre to me!

I never thought about it as weird coyness, just rather I prefer to keep work and personal life separate.
There are a couple of others in the office who also don't share this info and I've never thought any of it was unusual

OP posts:
HelpMeGetThrough · 08/03/2025 09:50

Thanks, I did and she said 'she had her way'..should have mentioned that in my opening message

If that's what she said, my response would have been, "well it sounds like you've accessed something you shouldn't, so let's hope for your sake you haven't as I am now going to take this further."

HelenWheels · 08/03/2025 09:50

perhaps she got the info from HR