Heads up to all ManFriday members

[SwearyG]

Our membership list has been leaked online.

Please do what you need to in order to keep yourselves safe.

and a tweet that says drinking pimms is relevant how exactly? FFS.

Seriously this just horrifies me in terms of sensibleness of the people who were behind this group.

And I am not going to just sit back and go oh well bad nasties did this manfriday were all good.

ManFriday were naive and made some potentially (or what look like on the face of it - I'm not in the group so I don't know exactly) poor decisions about where to host their activism and they need to learn from this going forward.

And, you know, the keep quiet don't say anything and insinuations about me here really don't help the cause of manfriday at all. They have made me very very angry - I'm sorry but they should have protected their members better. (I'm not one was not one never was one for the record) They ballsed up and they need to take that on the chin.

Did manfriday at any point promote the sales of their merchandise on fb?

Perhaps best for those of us not directly involved to leave it to those who are?

I'm entitled to comment - it's in the public domain.

So manfriday have a GDPR policy and it's all good that it was hosted on FB so it's all their responsibility and manfriday aren't liable at all?

Correct. As FB was the platform and everyone in the group had already signed up to FBs t & cs Man Friday do not need a GDPR policy as long as that data is not taken elsewhere to start a group away from FB.

Why and how was that person able to get that membership list?
ManFriday are a campaigning group they should have had GDPR policies in place to manage a situation like this.

The members list is available to anyone in the group. Its under the "people in this group" tab.
When this person took that info on to twitter they breeched the t &cs of facebook its nothing to do with MF.

MF do not need a GDPR policy if the only place they have a group in on FB. It is covered by FB GDPR.

If MF set up a web page and requested all who joined to give their personel data then yes they would need a GDPR policy but using FB as their platform means they dont.

And the you can give out your own number thing - yes of course you can, but a campaigning organisation, a business, a charity - anyone who isn't using that information for purely personal purposes - is supposed to have a record of your clear and explicit expression of consent to that data being used. I hope manfriday have that.

Unless that info is stored in anyway other way than for personnel use then yes but having peoples number in your phone that they gave you is totally ok. They do not need a GDPR policy to swap numbers for personal use.
There has been no breach of people numbers and emails so I dont see why you are stating they need a policy for this when you have no idea how they store such info or why.

And if you aren't involved, why have you set yourself up as the honest broker here?

It's a bloody disgrace. The names should never have been doxxed and the person who did that should be held accountable but ManFriday the organisation should never have been so lax.

ManFriday is not personal.

ManFriday is a campaigning group.

If the numbers swapped were used for anything to do with ManFriday then that is not personal use and ManFriday need to be able to demonstrate that they have clear and explicit consent for using those numbers.

I'm entitled to comment - it's in the public domain.

Why would you though if you know so little?

You have whipped up quite a storm with your GDPR posts but actually you have misunderstood it and alot of what you ssid is false and not relevent.

www.reddit.com/r/gdpr/comments/7zf0zz/client_information_on_personal_phones/

relates to business, but as manfriday are a campaigning group and not strictly personal then the advice is sound.

ManFriday need the ability to record consent, and wipe the info off any phone / laptop if that consent is withdrawn. As long as they can do that then it's all good. Assume from what you've said there that they have that in place?

Aye ok. I'm talking shit. I know fuck all about this and you know better and all we should be doing is saying oh poor manfriday it's all liability on facebook.

For the purposes of GDPR name is personal data just as much as phone number or email address. So whether it's your name is leaked or your phone number is irrelevant.

If the numbers swapped were used for anything to do with ManFriday then that is not personal use and ManFriday need to be able to demonstrate that they have clear and explicit consent for using those numbers.

Why is that relevent?
The breach is a facebook members list.
Not telephone numbers or emails.
You are not in the group so have no idea if contact details are used without consent.
You have no idea because you are not in the group if consent was sought when individuals chose to share their info.

If I gave my number to sweary and she text me MF updates, meeting times and ideas thats allowed. No breach of GDPR.

If under the name of MF she gave my number to another group/business/charity without my consent then yes that would be a breach but that has not happened here.

What was shared was a members list from FB which falls under their GDPR policy not MF.

And if you aren't involved, why have you set yourself up as the honest broker here?

This is bizarre.

Its Mumsnet, I am a member, I post here along with many others. Not usually this early granted, but I was woken up by the sunshine and the birds singing.

I don't know what you're on about other than whipping up drama. You're acting like they sent out group emails. They didn't

if I gave my number to sweary and she text me MF updates, meeting times and ideas thats allowed. No breach of GDPR.

ManFriday need to be able to show a record of your consent for that. Not Sweary as an individual but ManFriday the group.

So whether it's your name is leaked or your phone number is irrelevant.

Yes and it was leaked from FB the platform which MF used and which all members signed up to regarding FB GDPR policy. A seperate policy is not needed if that info is not tajen outside of FB by MF. Which it wasnt.
An individual took the public members list and put it on twitter. They broke FB rules. MF had nothing to do with it.

Look. If ManFriday are going to carry on after this, they need to wise the fuck up and put very much stronger policies in place. It's not whipping anything up to say that. If they had been wiser to start with, this would never have been able to happen and there is a degree of wilful naivety here that I find astonishing.

ManFriday need to be able to show a record of your consent for that. Not Sweary as an individual but ManFriday the group.

No they dont because I chose to give my number to sweary. If she got my number from any other source and sent me unsolicited texts under the MF heading then yes she would in breach of GDPR but that is not what is happening!!!

Did you send your number to Sweary as an individual only or because you have the desire to get updates re manfriday?

And there we go. It's all their fault for trusting that a woman wouldn't fuck the group over

I am out I have better to do than argue over this, the irony is I would have written a set of policies and procedures for ManFriday that would have been ironclad and covered their ass going forward - and that was what I meant when I said I would help.

Now, after this, quite frankly they can shove it.

Look. If ManFriday are going to carry on after this, they need to wise the fuck up and put very much stronger policies in place. It's not whipping anything up to say that. If they had been wiser to start with, this would never have been able to happen and there is a degree of wilful naivety here that I find astonishing.

There is no naivety you just think they are a stupid bunch of women.

Policies would not have stopped this leak.
There is a policy in place for it under FB rules but the individual has broken those rules. Thats not the responsibility of MF.

As for being wiser how could they have stopped it? This person was an activist also. A big supporter there was no way of knowing they would act the way they have.

The way MF have acted quickly and openly since the leak is commendable and shows they are doing the right thing in the right way.

Did you send your number to Sweary as an individual only or because you have the desire to get updates re manfriday

Both.

I think revealing has left the building...