GDPR breach? Should I say something or let it go.

[YesitsBess]

I'm in my probation period at a nationwide firm and there have been several issues in my onboarding weeks that have made me feel the whole place is a bit discombobulated and disjointed. Personal data seems to be a thing people just don't care about.

There was talk of a "department quiz" for Mt team, we're all over the UK and most work at home. I didn't agree to take part, just thought it was one of those things that you can ignore if you're not interested.

In our department meeting last week it was said the quiz sheets would be sent out soon. Also fine. I work at an office 90% of the time.

My quiz sheet turned up at my home the next day. I feel awful for bringing this up as a breach but my address isn't supposed to be available to any member of staff as per our policies, I hadn't indicated I was interested in the quiz at all, and thirdly, which I don't think i should have to disclose at all, I have an ex who could track me down by my work, which is why I'm not on the website etc.

Am I being a right pain if I bring this up?

I will, having been asked to 'find out' another colleagues address to send them flowers (lovely gesture) by asking someone in another department I'm disagreeing with you that it's likely all procedure was followed.

Ok @YesitsBess

If you're sure that a breach occurred & that this is a matter of personal safety for you, then report away.

Personally, I'd explain why it was an issue, presume no malintent was meant & ask that it didn't happen again

But up to you ..,

Just have a grown up conversation with your line manager / HR. Explain the quiz was fun but you’re just hoping to check who posted it / who has access to your address as it’s important to you it remains private, and say why if you feel comfortable doing so.

I wouldn’t start talking about data breaches because you have no idea and are just assuming the worst about your colleagues. If it was a breach you’re giving them the chance to make sure it doesn’t happen again without explicitly calling it out, which will help to keep things cordial.

Are you bringing this up to make the place into a better place for you to work at in future, to protect your employer against future problems, to protect your own privacy?

Because you making a fuss will not be interpretted as any of those motives. You making a fuss about this will mark you out as pain the arse colleague that others want to be wary of. Which is fine if you don't intend to work there much longer, anyway, and don't need a good reference.

@lljkk ouch! I essentially mean bringing it up in the sense of 'asking the colleague or my line manager how/if she got my address' (or if it was sent from HR as others have suggested) and deciding where to go from there. I'm not planning on driving a tank through the office.

My goal is for stuff not to be sent to my home without my consent, and to know that people all over the World who happen to work for the same company can't just get hold of my home address because they fancy it.

I wouldn’t say you’re a trouble maker for asking how your address was accessed and making sure it doesn’t happen again given you have reasons already known to HR.