Active discussions

Meet the Other Phone. Only the apps you allow.

Meet the Other Phone.
Only the apps you allow.

Buy now

Please or to access all these features

Talk
Work

Chat with other users about all things related to working life on our Work forum.

Original poster

GDPR breach? Should I say something or let it go.

31 replies

YesitsBess · 16/07/2023 22:15

I'm in my probation period at a nationwide firm and there have been several issues in my onboarding weeks that have made me feel the whole place is a bit discombobulated and disjointed. Personal data seems to be a thing people just don't care about.

There was talk of a "department quiz" for Mt team, we're all over the UK and most work at home. I didn't agree to take part, just thought it was one of those things that you can ignore if you're not interested.

In our department meeting last week it was said the quiz sheets would be sent out soon. Also fine. I work at an office 90% of the time.

My quiz sheet turned up at my home the next day. I feel awful for bringing this up as a breach but my address isn't supposed to be available to any member of staff as per our policies, I hadn't indicated I was interested in the quiz at all, and thirdly, which I don't think i should have to disclose at all, I have an ex who could track me down by my work, which is why I'm not on the website etc.

Am I being a right pain if I bring this up?

OP posts:
Spinewars23 · 16/07/2023 22:45

I’m in training at my work; two ice breakers and quizzes daily which I find very over the top, but no data breaches. Only 3 of us remaining in any one team, past the training, the ‘training’ ice breakers are totally over the top but no one’s data has been compromised unfortunately.

LIZS · 16/07/2023 22:57

So your address was used for the purpose of correspondence with your team. Unless it was circulated beyond the sender rather than one individual posting out I doubt it is a data breach. What does the Data Protection policy state?

RoseBucket · 16/07/2023 23:00

Confused.

tulippa · 16/07/2023 23:44

Who sent the quiz? Could someone have asked HR/admin to send it out to everyone in the company? This could have been done automatically so no-one would have seen your address. Don't know, just guessing here.
Also, why didn't they just email it to everyone? Bit odd to post it. Are you expected to post it back?

AnonymousAntWorker · 17/07/2023 00:24

All data breaches or suspected data breaches should be reported. Its every employees duty.
Even if it turns out there was no breach.

SD1978 · 17/07/2023 01:39

So who sent it? Was it the manager? I'd assume they'd have access to your details as your manager

Donotshushme · 17/07/2023 06:14

You should report it. This isn't part of your work duties, someone's accessed your records and used your home address for a purpose other than i presume what's stated in their data policy.

Donotshushme · 17/07/2023 06:15

SD1978 · 17/07/2023 01:39

So who sent it? Was it the manager? I'd assume they'd have access to your details as your manager

It doesn't matter if they have her address. What matters is if they've used it in accordance with their data policy/the law/her contract.

A bank or insurance company you have an account with will have your address. It doesn't mean they can just send anything to you without your consent.

sparklefresh · 17/07/2023 06:18

I wouldn't. I mean yes technically maybe there has been a breach somewhere, but whilst you're in your probationary period do you really want to make a fuss about something that has caused you zero harm?

Mousey23 · 17/07/2023 06:44

I think this does depend a little on who sent the quiz. If it's the tea lady organising a social quiz, you should ask the company that this isn't shared in this way. If it is the office team, or a senior manager, they will need access to your address for eg processing payroll, etc ... it can't be inaccessible to all staff (someone must have input the data from your application form; if there are serious HR issues they will most probably write to you at home).

GDPR is highly likely to allow sharing of data within the organisation.

lljkk · 17/07/2023 07:03

You really don't like working there, do you.

tenbob · 17/07/2023 07:10

It depends how much you want/need the job

As a head of department, I would not be keeping anyone on the team who was showing themselves to be this tricky within their probation, especially if they were already fully remote and had no established relationship with the wider team

Also, you said this is a breach as per their policy, but I would be surprised if they haven’t worded their policy in such a way to allow cover for things like this. Most policies I’ve read would not consider this a breach

FireflyJar · 17/07/2023 07:14

Your office is posting things? Do you not have the Internet??
Misses the point completely

Original poster
YesitsBess · 19/07/2023 22:53

Donotshushme · 17/07/2023 06:15

It doesn't matter if they have her address. What matters is if they've used it in accordance with their data policy/the law/her contract.

A bank or insurance company you have an account with will have your address. It doesn't mean they can just send anything to you without your consent.

Show quote history

I think this is it for me? It's a member of the team who has no reason to be sending me post at my home address. I'm mostly office-based.

I'm slightly creeper out that apparently anyone can get my home address if it's for something "fun" that I hadn't expressed any interest in taking part in.

OP posts:
ichundich · 19/07/2023 22:56

AnonymousAntWorker · 17/07/2023 00:24

All data breaches or suspected data breaches should be reported. Its every employees duty.
Even if it turns out there was no breach.

This. Within 72 hours.

Tilllly · 19/07/2023 22:58

A colleague suffered a bereavement recently

We did a card and put her name and a stamp on

HR then addressed and posted it

Could this have happened?

If not, yes it's probably a data breach. I'd be inclined to make a few notes and park it unless / until something happens again

However, you mention an ex, if this is a safeguarding concern I'd speak to your manager - but in a seeking advice / reassurance way, not as a complaint, and take it from there

Original poster
YesitsBess · 19/07/2023 23:16

Donotshushme · 17/07/2023 06:14

You should report it. This isn't part of your work duties, someone's accessed your records and used your home address for a purpose other than i presume what's stated in their data policy.

This is what I thought. It's absolutely nothing to do with work, and for reasons I don't really want to go into, HR are aware that there is to be no photo of me on the website etc

OP posts:
Original poster
YesitsBess · 19/07/2023 23:18

Tilllly · 19/07/2023 22:58

A colleague suffered a bereavement recently

We did a card and put her name and a stamp on

HR then addressed and posted it

Could this have happened?

If not, yes it's probably a data breach. I'd be inclined to make a few notes and park it unless / until something happens again

However, you mention an ex, if this is a safeguarding concern I'd speak to your manager - but in a seeking advice / reassurance way, not as a complaint, and take it from there

Thankyou, I feel very bad because I know the member of staff and there was clearly no malice in it. But on the flip side there should be absolutely no way anyone can just post things to my home address without me giving it the OK.

OP posts:
Original poster
YesitsBess · 19/07/2023 23:20

lljkk · 17/07/2023 07:03

You really don't like working there, do you.

Can you help me understand what you're saying here?

OP posts:
IhaveanewTVnow · 19/07/2023 23:22

I’m assuming you don’t want to keep your job. You will be labelled as a trouble maker and your colleagues will not engage with you going forward. I find it a little extreme to be honest. You are not 100% certain who addressed the envelopes.

Bumcake · 19/07/2023 23:24

Complain if you feel you must, but accept that word will get around that you’re difficult.

Original poster
YesitsBess · 19/07/2023 23:26

IhaveanewTVnow · 19/07/2023 23:22

I’m assuming you don’t want to keep your job. You will be labelled as a trouble maker and your colleagues will not engage with you going forward. I find it a little extreme to be honest. You are not 100% certain who addressed the envelopes.

That's helpful thankyou.

I'll pass that on to all the domestic violence victims/survivors within the organisation. Luckily it seems to be very easy to get their addresses.

OP posts:
EarringsandLipstick · 19/07/2023 23:27

@YesitsBess

If they have access to your address, then you are correct, it's a breach.

If someone who has legitimate access to your address sent this on behalf of someone else (so they didn't see your address) it's not a breach.

As a PP said this happens all the time for congratulations cards, bereavement cards & so on.

Exactly the same people who are meant to have access to the address still do.

I would check up exactly what happened first.

EarringsandLipstick · 19/07/2023 23:28

Luckily it seems to be very easy to get their addresses.

You don't know this.

Stop jumping to conclusions and check. If it's as I & PP have described, you've no worries.

Original poster
YesitsBess · 19/07/2023 23:29

EarringsandLipstick · 19/07/2023 23:27

@YesitsBess

If they have access to your address, then you are correct, it's a breach.

If someone who has legitimate access to your address sent this on behalf of someone else (so they didn't see your address) it's not a breach.

As a PP said this happens all the time for congratulations cards, bereavement cards & so on.

Exactly the same people who are meant to have access to the address still do.

I would check up exactly what happened first.

Thankyou, that is good to know.

OP posts:
Swipe left for the next trending thread