Breach of DPA

[newwave19]

Hi,

 

I need some advise on how far i can go with this.

 

Yesterday someone in my work sent out an email to all employee of my region some of every employees details. The details included employee numbers, Full names, DOB, where they worked and what salary we are all on.

 

I contacted my HR department and questioned about it, but she just wanted to fob me off to someone else, and when even asked about the companies duty of care to protect me and my personal information, she just sniggered down the phone.

 

If someone could please let me know what the best way to deal with this is, and what i should expect, i'd be grateful

 

Thanks

[MARTIN3030]

Welcome to the site.

Much depends on the reasons for this action and whether it was needed to be done in the normal course of business activity.

In a large organisation someone will be tasked with data processing -this is usually known as the data protection officer or compliance manager.

Their registration from the ICO will give specific categories for processing together with identifiable categories such as staff within the organisation,customers etc.

This is the person or persons who are ultimately responsible for data sharing and processing,and it is this person that you need to take this up with.

There should also be a privacy policy within your group or certainly some definitions as to how personal data is shared and processed.

You have a right to see this.

Do you know what was the purpose of the email and where it originated from ?

I think to advise more we would need to have some answers to the above.

see if you can find out a little more.

 

In the meantime-heres a little reading for you.;

 

http://www.ico.gov.uk/upload/documents/library/data_protection/practical_application/coi_html/english/employment_practices_code/about_the_code.html

Edited May 13, 2009 by MARTIN3030

[newwave19]

Firstly, thanks for your reply

 

The person the email came from was in error, she was sending it to someone, but then selected the whole region to send it too by mistake, she then tried to recall the email, but for some reason that feature doesn't work on our email system.

 

The email was sent by a retail administrator, but as for what the purpose of the email was for, i am uncertain, as one one of the people addressed on the email would have relevance to some of the content, but about 2/3 of it was meant for 2 other regions.

 

I have sent an email off to my regional manager this morning to request what you have said i your reply, so hopefully i will have something more for you later

 

 

Thanks again

[patdavies]

In a large organisation someone will be tasked with data processing -this is usually known as the data protection officer or compliance manager.

 

The post is Data Controller - as specified in the Act

[MARTIN3030]

Thank you-I am sure their HO will know how it is termed.

 

Newwave if it was sent in error then its a BIG mistake and you are right to be concerned.

You can usually get the company privacy policy from at the end of the email it more than likely says priviledged.