AIBU to think writing confidential HR notes on a train is inappropriate?

Yes that’s a good idea too

She shouldn't be doing it. People do. I see and hear it often. You could let her know and then she probably won't do it again.

Yes I know and this is what I’m saying. There are the odd times where relatives living at the same address had similar names ie. A common one I saw a lot of was sons who has been named after their fathers so there are 2 people living at the same address with the same name. You need to check the details fully ie. Name, address and DOB. However where I worked we were under strict instructions not to blurt out patient details on prescriptions and other documents as it can be seen as a confidentiality breach and instead ask the patient to give their details own details themselves.

Sometimes you can request to write this info down at the counter and pass it over.

in similar cirs I've had staff ask me to write personal ID on paper, to avoid it being overheard.

That's mean

@margegunderson It’s a word everyone understands and it’s got a certain disapproval about it. As I said, I think the op should have mentioned it to the HR employee. Yes, it’s an informal expression but conveys what I think. So no need to be superior!

She'd already breached confidentiality. Gdpr isn't optional on the basis you only share data with nice people.

Does anyone bother doing their annual refresher training? This is common knowledge.

Well if you were that concerned you would have told her. Rather than randomly post on here. Surely? If you were genuinely concerned that his information was being overlooked then you would have told her at the time. Given her a chance to rectify the situation. Because that’s what people who genuinely care about other people’s information do. So that’s what you did?

The details in NHS/pharmacy is more about patient identification - making sure the right person gets the treatment/medication. Even if you have two people with the same name in front of you.

DP has seen it in action - he found out there was a man on our street with the same (quite unusual) name as him because he met him in the pharmacy. Pharmacist shouts out 'John Smith' (obviously not) and they both step forward, street name, yes, so then they had to double check the house number and DoB to make sure the right person got the medication on offer.

Details are asked for because people working in those environments are trained professionals who know why the details matter. Members of the public are often idiots who don't listen not.

I fully understand you reading the screen OP. I can’t help reading everything I see. Once I have read all the safety instructions and setting opening hours + all the other visual clutter, I read what is left. I have been waiting for a hospital appointment and tried telling the clerk to put the referral letters in a more private place. He was not happy, I should have taken it up with management.

She was seriously out of order. Up to you what to do.

That’s why they ask you to give your details rather than them just blurting them out. It’s not a breach of confidentiality if you give your name, address and DOB yourself as you have the option to either decline to give them (for which they cannot hand over your prescription) or you can ask to say your details in private. But it can be a breach if they just blurt out your details without you giving them permission. I used to work in the NHS and this is the very reason we got told to ask the patients for their details rather than just reading their details out to them. A bit shit I know as you’re still giving them your details in front of anyone but it kind of rids them of any responsibility of breaching confidentiality

You do struggle with understanding don't you

I work in HR and she really needs to get a privacy screen if she has to work in public spaces. It is drummed into us about who can see our screen, not naming names in public spaces or in the open plan office etc.

I would have given her a heads up as I can only imagine she's blissfully ignorant that you can see her screen from the seat behind. I would get an almighty bollocking if I did the same so I'd probably try to spare her that but I don't think you'd be unreasonable to email the company.

I'm very surprised that anyone thinks this is OK.

I picked up a prescription yesterday and the pharmacist yelled “oh backed off I called you yesterday- wanted to see how you got on with the diazepam?”

Erm thanks for that 😂

I always wonder about the lack of confidentiality whenever I pick up my medication as the dispenser always asks for DOB, full name and full address. Pre online prescribing you would just hand in the slip and they would ask for the address to verify it was you.

So fucking lol that folks on this thread would be arsed getting in touch with the company. Yeah, she's being a bit thick but the likelihood of this having any real consequence whatsoever is vanishingly small.

She shouldn't be doing it and you shouldn't be reading her screen.

On Eurostar, which is very quiet, I’ve heard a manager giving an employee the sack by (very audible) phone; someone else ordering goods on their Visa card, giving the number, their name and all the details necessary for someone to jot it all down and defraud them. Waiting in the reception area at a busy A&E department I heard several patients giving their full identity details to the receptionist for everyone waiting to hear. People are very irresponsible and identity fraud is very common.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/personal-information-what-is-it/what-is-personal-data/what-is-personal-data personal data obviously

i asked what section of GDPR it’s breachingZ most people screech GDPR without having the first clue about it.

i am not sure how you read that as not understanding

Can’t begin to imagine wanting to cause a stranger a whole world of potential pain/disciplinary action by reporting them.

I wouldn’t think twice about this. It is not best practice obviously but I wouldn’t dream of reporting her.

I don’t think it’s odd. I’ve seen something similar at least twice. Once was a HR person advising on a disciplinary on the phone on the train, and another time someone writing up notes of a HR meeting.

It makes sense if you understand GDPR rules, which you obviously don't.