When you go sick at my work, you phone up and one of the seniors answers the phone asks you why you aren't well and you then they ask you to ring every day with an update.
When you get to work, one of the seniors then fills in a back to work form with you and files it.
There's a woman at work who has a medical condition and has to have treatment regularly. She's told occy health who made it seem pretty confidential to organise prearranged days off for treatment.
She was really upset at work this week and when I asked her, she said that she had a return to work with a senior who asked for details of her health condition and then asked her the details of why she was off sick.
She was upset because she had no idea that every single senior can do a return to work, ask her questions about her health condition, they all view her personal data folder with previous sicknesses details in and she said she's so anxious about going to her treatment again because she has to phone in - tell a senior that she's sick after treatment and explain the details to which ever senior answers the phone.
She then has to discuss the sickness from treatment with which ever senior is working the day she comes back to work, reads her personal file and adds the latest sick form to it.
There are about ten seniors at work and each time a junior does more training and becomes a senior, they will be entitled to read her personal file and about her medical condition and do return to works.
I thought GDPR protected staff's personal data from being shared?
I thought we had a right to confidenciality in the work place?