Aibu to be concerned about this?

[MsMarvel]

Worried about a possible information/data breach in work, but not really sure what is normal etc so thought I would ask here.

I have a company car, which is leased through an external lease car company. All car registration/details are registered to my office. V5 form for the car doesnt have my home adress on it.

The other day i got 2 letters through the post, the name on the adress was the admin manager of my office, with the company name, then my home adress.

The letters had parking charges in them. But neither were for my car. Based on the models of the cars in the photos provided, i assume they are company cars used by other employees.

I phoned the admin manager who doesnt know why they were sent to me, and asked me to forward them to her in the office which ive done. She said they normally go to her in the office.

How concerned should I be about this? From what i understand , if my car isnt registered to me personally, then the lease car company shouldnt have my adress on file at all, so where has this parking company got my adress from??

Theres also the fact that ive been sent other people's parking fines, which i suppose is a confidentiality issue as well, but other than car reg number/ time they were in a certain car park, i don't have any personal info.

Should i be worried about where my adress and potentially other information is being held, and who it is given to?

Yes I'd be worried. Speak to Work ASAP

I know my work are likely to dismiss this as not being that serious, there are no HR staff at all for a company with around 200 employees, which is its own issue as well...

Im not sure how much to push this, what specific questions to ask, answers to expect, solutions?

Like you ask the lease company how they have your address of work won’t help?

Sorry

Could

Not like

I would also contact the DVLA!

How confidential should i expect my adress to be kept?

Ive emailed my boss about it who agrees that its worrying and is going to investigate. Lets see what happens...

Go after the leasing company first, as they are partly to blame for letting your data get mixed up with that of other drivers, and for not querying the domestic address on a company car. Hopefully, they will then rush to blame your company (which gave them your address in the first place), and you will know whom to blame at your company.

This sort of thing really isn't all right. GDPR was brought in on the principle that companies don't need to hold lots of information about us, and as it has been proven again and again that data breaches happen, they must not hold any more information about you than is needed to perform your business activities (e.g your address and credit card details to take payment and send an item OR file a VAT return - VAT on digital goods chargeable according to EU country of residence). There are various other things involved, but that's what your company and the leasing co have probably done here. From 25 May, GDPR has been enforceable...

Oops, cross-post! I kept losing the post and having to re-type.

I'm reluctant to contact the lease company myself, as I dont have any direct dealings with them at all. If anythinf happens to my car, needing a service etc, I contact my office, who then arrange it for me. They should never have had my home address in the first place, and the only place they would have got it is from my employer.

(Even my drivers license currently has a different address, as ive not updated it, which I know I need to do, but also means info hasnt come from DVLA etc. )

Well, if you've got someone in your company on it, perhaps you won't have to go through the leasing company to get to the culprit. It's just real sloppiness.

Yeah im going to make sure i push for an answer into what's happened. If they do confirm a data breach is an apology all I should expect?

I don't think there are any enforcements under the new legislation yet, but companies are certainly very worried!

Could it be that they have to have the address where the vehicle is kept overnight for insurance purposes?

But it's the OP's address attached to two other company cars!

So my office have confirmed that parking eye and the lease car company should not have any access to staff personal information. Their only contact is my office administrator at the office adress. They have written to parking eye to ask where they got their information from.