Deliberate data protection breach

[Workissueshelp]

Posting for traffic.

In a nutshell, DH’s manager at work has emailed another member of staff a letter that was sent to dh about an up and coming disciplinary matter. The email joked “I thought you’d enjoy this as you don’t get on” then it said make sure you delete this message.

This letter had our address on, not to mention the fact that dh was having a disciplinary action taken against him. (Off for work related stress)

Dh will not work for them anymore and will resign shortly. Horrible company who have made DH’s life a misery after going over on a TUPE.

We only found this out after requesting a subject access request.

Do you think if we report this, they will treat the data protection seriously?

Bump for reply on the bullying

www.gov.uk/workplace-bullying-and-harassment

It oculd be bullying as it shows that, whilst your D was unaware, his manager was not acting professionally with regards to him and his employment - you can show the manager was ndermining your DH, "sick" etc.

His attitude towards your Ds sick leave mean he could also have been denied promotion, training etc.

But his union rep or ACAS will be able to help with the details.

Sounds awful, OP! I would be really upset at such treatment of my DH. Hope you can get it sorted. I contacted ICO about my own suspected data breach and they never came back to me.

Sorry to jump on to your thread with my own question but as there as so many GDPR experts commenting here, I just wanted to ask if I have a breach of my own.

Long story short (May just start my own thread instead of hijacking OP’s) is that the DVLA lost my marriage cert, said they sent it via Royal Mail 2nd class post but it was never received. I’ve written countless times and they’ve been no help at all, just telling me to “check it hasn’t been mislaid at home” which it can’t have been as I haven’t had it back since I sent to them. I contacted ICO via the online form and didn’t get any response. I’m concerned that my document could be used in identify fraud! It’s not like I can change my personal information such as DOB, name etc. I’m awful to think my details are floating around somewhere for someone to abuse.

Sorry again OP for hijacking your thread. Just wanted to ask while so many GDPR whizzes are on 1 thread.