Breach of GDPR?

[wapphighwood]

I've got an interview coming up and was emailed a timetable covering who each interview would be with and time, however it also included this information for the other candidates including their full name. Isn't this a breach of gdpr? I was surprised they didn't send individual timetables

It could be a genuine mistake, they sent the email to candidates instead of the interviewers. Is it just their name, it might be a breach, why don't you call them and say you've got this with other names on it and see what they say. If it's a sensitive job I would question their confidentiality procedures.

Yep they shouldn't have sent you the names of the other candidates, just emailed you the details of your interview. Maybe email them and politely point this out to them.

Maybe don't email them and point it out if you want the job!!

If this sort of thing is a big issue for you, think again about whether you want to work there. It's a bit shit if you're another candidate who doesn't want people to know they are interviewing.

However- realistically you'll be "that candidate" if you point it out...

What’s the job? If the job involves data maybe this is a test to see if you mention it?!!

ChessieFL, a bit like when the interviewer leaves a the room and the phone rings

Use it to your advantage - check out your competition.

I'm not sure this would be covered by gdpr as you're directly involved and there's a high chance that you would see other candidates in the car park or while on a different stage of your interview.

It is a data role. I was thinking it might be a test but I now think it isnt as gdpr responsibility doesn't sit in this role description. I might mention it verbally at the interview but I don't actually think it is a breach strictly speaking

In broad terms GDPR is there to protect the individual's right to visibility and control over how their personal identifiable information is stored, shared and used.

In this context, Candidate's name does not breach GDPR if it is used in isolation to other key data such as address, DoB, contact number for example. However it is borderline, if the person's name is so unique as to give the ability to check them on LinkedIn.

Using the data to "check out the competition" is precisely the reason why GDPR should come into its own - those other candidates haven't given their permission to divulge their name. What if they had taken a sickie from their current job? What if they turn up and they have the advantage of knowing their colleague has also got a place in the candidate pool?

Highly unlikely anyone would get the ICO to swoop in on the company for a data breech but it's quite shabby and would make me question the professionalism of their work practices!