Job applications, privacy and confidentiality?

[Schadenfraulein]

I work in the NHS, and applied for a job in a different department separate but close to the one I work in. The departments work closely together, often cross covering work, and staff know each other.

I hadn't told anyone in my current work place that I had applied as I wasn't fully sold on the job. I'm team leader for a small team, we have had a rough time recently and I didn't want to unsettle them by making it known prematurely that I am exploring other options. I also wanted to avoid lots of 'when is your interview?' and 'Did you get it?' type questions.

When I arrived at work today, somehow most of my colleagues were aware that I had applied for the job, even though I hadn't told anyone about my application. It turns out that the other department have been told who had applied for and was interviewing for the job, and that information has made its way along the grapevine to my colleagues.

The interview was today, I didn't get it (absolutely fine, I didn't interview well). When I got home, I then had Facebook and whatsapp messages from other applicants and more of my colleagues asking how the interview went.

It has put me in an awkward situation as I hadn't had chance to speak to my current manager ahead of the interview (differing schedules, annual leave etc), or the little team I have responsibility for.
Moreover, I'm quite upset that I seem to be a source of gossip in both departments now.

I suppose my question is, was it reasonable to have some expectation of confidentiality or privacy in this situation?

Yes definitely. I am v surprised the other team were told who applied. I would be minded to complain. Although if you work closely with the other team it might not be a good idea.

@Schadenfraulein this is a breach of GDPR. Find out who your Data Protection Officer is and phone them (don’t email). Say you want an off the record chat and explain you are distressed the application process was not confidential. Ask if there is anything you can do to prevent this happening again. The DPO should then investigate this and report to ICO as a data breach. If they brush it off then make a formal complaint, https://ico.org.uk/for-the-public/

You should have a privacy policy on your Intranet use this to help you make a complaint.

WRT you manager - speak to them and say the process should have been confidential under GDPR. Say you would have told them and are distressed your confidentiality has been breached. Ask them to help you deal with the gossip as this is a breach of GDPR.

WRT your colleagues a brief - I didn’t get the job, please don’t ask any more questions. For the nosy colleagues who don’t let it drop, say it’s a breach of GDPR that they know and it is inappropriate they are asking questions - basically a polite fuck off.