Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Work

Chat with other users about all things related to working life on our Work forum.

breach of personal information

6 replies

JRSA · 20/09/2024 12:07

I am wondering if this is a breach of personal data ... pls be so kind as to advise .... a colleagues personal HR file was left in an office with all staff having access into the office .... just lying on the desk for all and sundry to acces if they wanted .... with a handwritten note from the manager for the employee to complete a form inside the file .... it was lying there for three days .... when the employee came in and saw it on the desk ... they were quite upset as all their data was in the file which consisted of all pesonal data , banking data , HR dox and references and anything pertaining to that employee ... is this a norm or is it a breach ....the employee removed the file and has it in their possession ... no one has even enquired about it missing etc ... by the way this is a huge company not a small mom and pop business ....

OP posts:
UnbelievableLie · 20/09/2024 12:09

Yes it's a breach. I'm very confused why a large company has paper files though - it should be all digital with restricted access.

Overtheatlantic · 20/09/2024 12:11

That’s a breach of GDPR guidelines and should be reported in case any financial information has been stolen. It sounds like HR should arrange for training for the managers. And why did HR release the file to begin with?

JRSA · 20/09/2024 12:27

yip ... they still have the paper trail .... and why would the manager have that employee's file as the employee does not fall under the division of that manager but this really happened ...

OP posts:
JRSA · 20/09/2024 12:29

your guess is as good as anyones why the file was released to a bottomfeeder manager and why they would even be handling anything with that employee as the employee falls under a different division

OP posts:
user1473870459 · 20/09/2024 23:24

Usually there is a Data Protection Officer in the company who you report incidents to for investigation.

timoteigirl · 22/09/2024 09:51

You must report this as security breach. There should be a specified route how to do it.

New posts on this thread. Refresh page