Data Protection of Employees Info -Group emails to all staff
Data Protection of Employees Info -Group emails to all staff
Author
Discussion

User33678888

Original Poster:

1,147 posts

167 months

Thursday 10th August 2017
quotequote all
My son has recently started a part time job. The rotas and things are sent out to their personal email addresses without the use of a BCC function. That's giving all of the staff the others full names and personal email addresses. That seems like such an obvious breach to me, but apparently it is helpful as they can all email one another to swap shifts etc.
It's a team of about 50 all in, if that makes any difference.
Thoughts?

Durzel

12,999 posts

198 months

Thursday 10th August 2017
quotequote all
It's unprofessional for sure, but I think some perspective is required.. it's an email address, not his medical history.

Vaud

59,652 posts

185 months

Thursday 10th August 2017
quotequote all
Durzel said:
It's unprofessional for sure, but I think some perspective is required.. it's an email address, not his medical history.
Especially as it is useful for swapping shifts.

If he is concerned then have him setup a work only account - e.g. gmail - and have his existing account automatically collect that email. When he leaves the company he can just delete the account.

Dan_M5

616 posts

173 months

Thursday 10th August 2017
quotequote all
Email address isn't data protected

Derek Smith

49,908 posts

278 months

Thursday 10th August 2017
quotequote all
The DPA states:

appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

The question to be asked is whether the way email addresses are dealt with conforms to this requirement. On the information given it is impossible to be definitive. Are these all corporate email addresses. ie supplied by the company, and not those that are used for other more personal matters?

I'd suggest there could be other ways of solving the problem, but I don't know the full details.


Vaud

59,652 posts

185 months

Thursday 10th August 2017
quotequote all
Derek Smith said:
Are these all corporate email addresses. ie supplied by the company, and not those that are used for other more personal matters?
User33678888 said:
The rotas and things are sent out to their personal email addresses without the use of a BCC function.

Torquey

1,959 posts

258 months

Thursday 10th August 2017
quotequote all
Sounds like a ridiculous thing to worry about.

Are they allowed to address people by their name at work or are they given a false identity to go by...

Kuji

785 posts

152 months

Thursday 10th August 2017
quotequote all

On a positive note, that simplifies your sons xmas present choices,