Heads up to all ManFriday members

ManFriday need to be able to show a record of your consent for that. Not Sweary as an individual but ManFriday the group.

No they dont because I chose to give my number to sweary. If she got my number from any other source and sent me unsolicited texts under the MF heading then yes she would in breach of GDPR but that is not what is happening!!!

Look. If ManFriday are going to carry on after this, they need to wise the fuck up and put very much stronger policies in place. It's not whipping anything up to say that. If they had been wiser to start with, this would never have been able to happen and there is a degree of wilful naivety here that I find astonishing.

So whether it's your name is leaked or your phone number is irrelevant.

Yes and it was leaked from FB the platform which MF used and which all members signed up to regarding FB GDPR policy. A seperate policy is not needed if that info is not tajen outside of FB by MF. Which it wasnt.
An individual took the public members list and put it on twitter. They broke FB rules. MF had nothing to do with it.

if I gave my number to sweary and she text me MF updates, meeting times and ideas thats allowed. No breach of GDPR.

ManFriday need to be able to show a record of your consent for that. Not Sweary as an individual but ManFriday the group.

I don't know what you're on about other than whipping up drama. You're acting like they sent out group emails. They didn't

And if you aren't involved, why have you set yourself up as the honest broker here?

This is bizarre.

Its Mumsnet, I am a member, I post here along with many others. Not usually this early granted, but I was woken up by the sunshine and the birds singing.

If the numbers swapped were used for anything to do with ManFriday then that is not personal use and ManFriday need to be able to demonstrate that they have clear and explicit consent for using those numbers.

Why is that relevent?
The breach is a facebook members list.
Not telephone numbers or emails.
You are not in the group so have no idea if contact details are used without consent.
You have no idea because you are not in the group if consent was sought when individuals chose to share their info.

If I gave my number to sweary and she text me MF updates, meeting times and ideas thats allowed. No breach of GDPR.

If under the name of MF she gave my number to another group/business/charity without my consent then yes that would be a breach but that has not happened here.

What was shared was a members list from FB which falls under their GDPR policy not MF.

For the purposes of GDPR name is personal data just as much as phone number or email address. So whether it's your name is leaked or your phone number is irrelevant.

Aye ok. I'm talking shit. I know fuck all about this and you know better and all we should be doing is saying oh poor manfriday it's all liability on facebook.

www.reddit.com/r/gdpr/comments/7zf0zz/client_information_on_personal_phones/

relates to business, but as manfriday are a campaigning group and not strictly personal then the advice is sound.

ManFriday need the ability to record consent, and wipe the info off any phone / laptop if that consent is withdrawn. As long as they can do that then it's all good. Assume from what you've said there that they have that in place?

I'm entitled to comment - it's in the public domain.

Why would you though if you know so little?

You have whipped up quite a storm with your GDPR posts but actually you have misunderstood it and alot of what you ssid is false and not relevent.

ManFriday is not personal.

ManFriday is a campaigning group.

If the numbers swapped were used for anything to do with ManFriday then that is not personal use and ManFriday need to be able to demonstrate that they have clear and explicit consent for using those numbers.

And if you aren't involved, why have you set yourself up as the honest broker here?

It's a bloody disgrace. The names should never have been doxxed and the person who did that should be held accountable but ManFriday the organisation should never have been so lax.

So manfriday have a GDPR policy and it's all good that it was hosted on FB so it's all their responsibility and manfriday aren't liable at all?

Correct. As FB was the platform and everyone in the group had already signed up to FBs t & cs Man Friday do not need a GDPR policy as long as that data is not taken elsewhere to start a group away from FB.

Why and how was that person able to get that membership list?
ManFriday are a campaigning group they should have had GDPR policies in place to manage a situation like this.

The members list is available to anyone in the group. Its under the "people in this group" tab.
When this person took that info on to twitter they breeched the t &cs of facebook its nothing to do with MF.

MF do not need a GDPR policy if the only place they have a group in on FB. It is covered by FB GDPR.

If MF set up a web page and requested all who joined to give their personel data then yes they would need a GDPR policy but using FB as their platform means they dont.

And the you can give out your own number thing - yes of course you can, but a campaigning organisation, a business, a charity - anyone who isn't using that information for purely personal purposes - is supposed to have a record of your clear and explicit expression of consent to that data being used. I hope manfriday have that.

Unless that info is stored in anyway other way than for personnel use then yes but having peoples number in your phone that they gave you is totally ok. They do not need a GDPR policy to swap numbers for personal use.
There has been no breach of people numbers and emails so I dont see why you are stating they need a policy for this when you have no idea how they store such info or why.

I'm entitled to comment - it's in the public domain.

Perhaps best for those of us not directly involved to leave it to those who are?

Did manfriday at any point promote the sales of their merchandise on fb?

and a tweet that says drinking pimms is relevant how exactly? FFS.

Seriously this just horrifies me in terms of sensibleness of the people who were behind this group.

And I am not going to just sit back and go oh well bad nasties did this manfriday were all good.

ManFriday were naive and made some potentially (or what look like on the face of it - I'm not in the group so I don't know exactly) poor decisions about where to host their activism and they need to learn from this going forward.

And, you know, the keep quiet don't say anything and insinuations about me here really don't help the cause of manfriday at all. They have made me very very angry - I'm sorry but they should have protected their members better. (I'm not one was not one never was one for the record) They ballsed up and they need to take that on the chin.

revealing
Not sure of your involvement but as above in my reply to SimplySteve,

see page 12 for advice and update from Sweary & Yes

Yes said specifically,

"If anyone is worried in particular, please do send me a FB message and I’ll try to respond ASAP."

They may though be enjoying a Sunday morning lie-in...

Using a false name on Facebook is against their terms & conditions, and the account could be deleted. See section 3 here:m.facebook.com/terms.php

And?
Doesnt mean its impossible or cannot be done though.
My second account is 3 years old and abviously false due to the name however because I dont breach any other of their rules ( I dont send abusive messages or posts and I am not pretending to be a celeb or other individual) i go unnoticed.

So manfriday have a GDPR policy and it's all good that it was hosted on FB so it's all their responsibility and manfriday aren't liable at all?

I disagree.

Why and how was that person able to get that membership list?
ManFriday are a campaigning group they should have had GDPR policies in place to manage a situation like this.

And the you can give out your own number thing - yes of course you can, but a campaigning organisation, a business, a charity - anyone who isn't using that information for purely personal purposes - is supposed to have a record of your clear and explicit expression of consent to that data being used. I hope manfriday have that.

revealing If it helps to reassure you or alleviate your concerns, I think Sweary was with the police yesterday. I remember seeing a tweet that she was on her way to report the doxxing and then saw the Pimms O'clock update.

Hope that helps a little.

Using a false name on Facebook is against their terms & conditions, and the account could be deleted. See section 3 here: m.facebook.com/terms.php

And the info has in fact been shared without consent to another party - it's been put all over fucking twitter.

The facebook members list was shared. This then comes under Facebooks GDPR policy not Man Fridays. Plus the info shared is public info anyway which everyone who signed up to FB already agreed could be publicly accessable.

The data shared was name and area they live which each individual had already agreed to via signing up to FB.

Man Friday have not breeched any GDPR rules.

you have to use your real name for facebook,

Wrong. You can have an anon facebook page that has info the public see which is totally made up.

I have 2 FB pages. One as me and one "false" one that I use when I joined GC groups.