To think that this should not have been discussed with anyone but me?

[MacDuffsMuff]

I'm really pissed off but need to know if I'm overreacting.

We lived with MIL for 6 months while renovating our house, we moved out over 5 years ago. During that time I had an operation so my home telephone number was her number but all records were changed when we moved into our house.

I have been waiting for an appointment for something that I haven't told MIL about. Firstly, because I have nothing really to tell her until after I've had some further tests and secondly because I know that she worries.

The hospital called today to offer me an appointment and they called the old number - fine, mistakes happen. However, when they asked for me and MIL told her that I was her DIL and no longer live there they gave her the details for the appointment to pass on to me. MIL asked the receptionist what the appointment was for and she told her. I'm pissed off for a number of reasons, firstly because now MIL is worried, but I don't think they should be discussing my appointment with anyone but me.

I really feel that I want to complain about this (I'm not a complainer at ALL) but I feel so mad about this.

I feel like this is a breech of data protection, I work for a housing association and I wouldn't even be allowed to tell someone else what a repair is for never mind medical information. I can completely understand why you are upset and angry. I'm not a complainer either but if the receptionist is doing this often then she needs to be told otherwise. I'd complain but it's up to you, good luck with your appointment x

Yanbu. You need to submit a complaint, this is a serious breach of privacy. The individual involved needs to receive further training so they don't keep doing it.
Imagine it was for an abortion and an abusive partner answered the phone?

That's not on. She shouldn't have answered any questions. I'd be really pissed off with that. And with your MIL for asking.

Definitely not unreasonable, surely that's a massive breach of confidentiality

Also your mil really shouldn't have asked what it was for.

Clear GDPR breach.

And with your MIL for asking.

Yes, I am a bit at her for asking and she did say that she 'knows I shouldn't have asked' but I know she was just concerned. She's 82 and a nosy bugger at the best of times but I know she worries, which is the main reason I didn't tell her.

Are you sure MIL didn’t pretend to be you to find out the details? It’s very shocking that someone who knows the rules re privacy would do this.

I think it was very rude and intrusive of your MIL to ask what your appointment was for, and very inappropriate, and a breach of confidentiality, for the receptionist to tell her. YANBU

that is really bad, you should definitely complain.

I have to say normally when I hear a data protection iffy case I think people are overreacting, but even I think this is utterly, utterly unacceptable. Should NOT have happened, and yes you would not be unreasonable to make that clear to the docs.

@Cripesalive

Are you sure MIL didn’t pretend to be you to find out the details? It’s very shocking that someone who knows the rules re privacy would do this.

No I don't think she would do that, I think the lady asked for me and she told them that I don't live there anymore but she could give me a message or pass on my number. It was then that the receptionist said who she was and why she was calling. MIL didn't actually say who she was, she could have been anyone on the end of the phone.

She shouldn't have asked and I'm not happy that she did, but she shouldn't have been given any of the information either.

That is bad!
In fact it's so clearly against data protection rules that I am surprised a trained medical receptionist would make that mistake (not impossible though I suppose).
So like a pp, I wonder whether you are getting the full truth from mil!

Sorry cross post.
If it would be out of character for her to lie, then ignore my post!

It is a clear data protection breach and I would note a complaint with the clinic or hospital. As other posters have said though OP, do be cautious that your MIL might have said she was you. My father went into hospital a couple of years ago (in his 80s). A female acquaintance (not even a friend) called the hospital to see how he was. When they said they could only speak to relatives she told them she was his wife. They gave her a full update! He never spoke to her again. In good organisations they will go through a basic process (DOB, address, perhaps year of registration, last appointment etc) to check its you. Just wonder about pretending to be you though if she is usually nosey and the hospital has called?

Yanbu at all. This is partly why I ask the school, Dr, etc to call me Ellie because otherwise my mil will answer my phone trying to be helpful and confirms that yes she is Mrs Tiny. She doesn't mean to, she just forgets that although we are both called Mrs Tiny, not many people will call my phone and want to speak to her.

she will have had GDPR training, everyone does (not to mention pre-existing rules of confidentiality)
OP you should report it - not out of malice but to stop it happening again.

MIL told her that I was her DIL and no longer live there

MIL didn't actually say who she was, she could have been anyone on the end of the phone.

If you contrdict yourself like that when you complain they'll likely not take it as seriously.

Massive breach of data protection. I'd really lay into them for it, it's not an easy mistake to make, it's very easy to know not to talk someone who isn't the patient about their medical records. She needs it reporting because she could easily be telling the wrong people stuff, imagine telling an abusive husband their wife is having an abortion or an sti test.

I wouldn't be too pissed at your MIL asking if she's not prone to shit stirring. If I was taking notes for a phonecall for someone I would automatically ask what is was for, it's the other persons literal job to say its private.

That's totally out of order, and needs reporting. That staff member needs retraining.

I would complain that is a data breach by the sounds of it and I would be very annoyed too!!!

Definitely a breach. I think you really need to report this. I work for the nhs and wouldn't dream of doing this, it's absolute basic common sense to not discuss and things like this are taken very seriously if reported.

That's a pretty bad data breach. 100% PLEASE report it, the more people that do, the more this kind of thing gets weeded out.

That was so wrong MacDuffsMuff, I would be livid. It's likely the receptionist will be at duty when you go for your appointment, departments usually have their own small team, so ask at the desk who it was who telephoned and if she is there, tell her straight. Or else 'phone up before and speak to her. She was wrong and needs to be told.

I also don't think your mother in law was right to ask, frankly.

Massive data breach. Make sure you complain in writing so there's a proper audit trail.