GDPR - anyone working in this area?

GDPR - anyone working in this area?

Author
Discussion

plasticpig

12,932 posts

225 months

Wednesday 20th June 2018
quotequote all
jammy-git said:
Can anyone point out where in the GDPR guidelines it says that either 1) it doesn't cover B2B or 2) business email addresses are fair game?
GDPR said:
The protection of natural persons in relation to the processing of personal data is a fundamental right.

A limited company or a partnership is not a natural person.


jammy-git

29,778 posts

212 months

Wednesday 20th June 2018
quotequote all
So that's fine with info@ addresses for instance, but if the example given a few posts ago was sent to a.person@company then that would still fall under GDPR, no?

plasticpig

12,932 posts

225 months

Wednesday 20th June 2018
quotequote all
jammy-git said:
So that's fine with info@ addresses for instance, but if the example given a few posts ago was sent to a.person@company then that would still fall under GDPR, no?
The email address is the property of the company the employee has no rights over it.




Sheepshanks

32,781 posts

119 months

Wednesday 20th June 2018
quotequote all
plasticpig said:
jammy-git said:
Can anyone point out where in the GDPR guidelines it says that either 1) it doesn't cover B2B or 2) business email addresses are fair game?
GDPR said:
The protection of natural persons in relation to the processing of personal data is a fundamental right.

A limited company or a partnership is not a natural person.
GDPR is all about minimising risks to the rights and freedoms of individuals. It would be tough to argue that sending someone in a business an email caused them harm.

jammy-git

29,778 posts

212 months

Wednesday 20th June 2018
quotequote all
plasticpig said:
jammy-git said:
So that's fine with info@ addresses for instance, but if the example given a few posts ago was sent to a.person@company then that would still fall under GDPR, no?
The email address is the property of the company the employee has no rights over it.
So where is the line? What about people that use gmail addresses for company purposes? Or vice versa.

I imagine this is one of the things that will get clarified through case law? As has been suggested before, I can't see any company being fined specifically for sending an email to the wrong type of email address, but it will be taken as part of a whole view of the companies practises and processes.

jammy-git

29,778 posts

212 months

Wednesday 20th June 2018
quotequote all
Thanks Tin! It's great to see some real world examples and to see how you've worked through it.

jonamv8

3,151 posts

166 months

Wednesday 20th June 2018
quotequote all
DELETED: Comment made by a member who's account has been deleted.
Bit of an assumption tho, there is no proof or definitive evidence that bloggers like free stuff. It seems that the 'LI' angle can be thrown around very easily as long as you can back it up with a statement such as bloggers like free stuff.

I've got a neighbour called Maureen - she loves dogs. I've got a database of 2.4m females in UK, 124,581 are called Maureen. I also have a dog based product to sell, based on the fact that women called maureen like dogs, I'm going to use LI to mailchimp the hell out of 124,581 records in my cheaply bought database ;-)

Sheepshanks

32,781 posts

119 months

Wednesday 20th June 2018
quotequote all
jonamv8 said:
I've got a neighbour called Maureen - she loves dogs. I've got a database of 2.4m females in UK, 124,581 are called Maureen. I also have a dog based product to sell, based on the fact that women called maureen like dogs, I'm going to use LI to mailchimp the hell out of 124,581 records in my cheaply bought database ;-)
Don't forget that it's your legitimate interests, not theirs! So just mail away to all dog lovers, whatever their name is. smile

loafer123

15,444 posts

215 months

Saturday 23rd June 2018
quotequote all

I clicked on an advert on here for shoes and thought, for a bit of light relief, their Privacy Polciy might amuse;

https://www.undandy.com/privacy-policy

Basically says, we can use cookies and contact you at will because you know you love buying stuff.

TheRainMaker

6,339 posts

242 months

Thursday 28th June 2018
quotequote all
TheRainMaker said:
jonamv8 said:
TheRainMaker said:
Complaint gone into the ICO about the ICO, total incompetent shower of s*^t.

Let us see if that finally gets a response from them, all we want to do is give them money hehe

Over a month now to try and get DD payment details, no response from email, phones just ring and ring.
HAHAHA yeah I'd like to complain to the ICO, about the ICO and their utter lack of real guidance from SMEs or even awareness.

and for taking me away from making money to devise some bureaucratic policy that no one will ever read
Still no response hehe don't think I have ever dealt with a government department who are actually this bad.
Woohoo woohoo

After 56 days of waiting, I've just received payment details.

No response to my complaint though, probably just went in the bin.

Frimley111R

15,668 posts

234 months

Thursday 28th June 2018
quotequote all
Amazed at how many GDPR emails I received without any unsubscribe links..

TTmonkey

20,911 posts

247 months

Thursday 28th June 2018
quotequote all
Cookies., Cookies everywhere. FFS. Even PH. Its like when you first discover the internet FFS.

stevesuk

1,346 posts

182 months

Thursday 28th June 2018
quotequote all
A company I'm associated with had their first request from an individual asking for a copy of their personal data - citing GDPR.

Not that its my responsibility to sort out a response, but I had a quick read about the protocol - and apparently you must take all reasonable care to make sure that the person making the request is actually the data subject - so yet more correspondence backwards and forwards asking them for proof of identity.

If someone writes pretending they are someone else, and requests data which you handover - then I guess you'd be reporting yourself to the ICO for a data breach smile

Eric Mc

122,033 posts

265 months

Thursday 28th June 2018
quotequote all
Yep - it's mind blowingly circuitous.

Just tell them that, due to GDPR rules, they can'[t supply the data requested smile

stevesuk

1,346 posts

182 months

Thursday 28th June 2018
quotequote all
Eric Mc said:
Yep - it's mind blowingly circuitous.

Just tell them that, due to GDPR rules, they can'[t supply the data requested smile
Yep, my worry also is that now you're obliged to respond free-of-charge (you used to be able to charge an admin fee I think?), these requests are going to become more and more prevalent. Glad its not my direct responsibility to deal with them.

jammy-git

29,778 posts

212 months

Friday 29th June 2018
quotequote all
Can't see how this wouldn't come under legitimate interest under GDPR.

TheRainMaker

6,339 posts

242 months

Friday 29th June 2018
quotequote all
So she drove off without giving details, Police doing their job find out details and pass onto the third party so they can pass onto the insurance company.

What am I'm missing and why would you not expect the Police to pass on details?

GDPR doesn't give a free license for hit and runs.


Sheepshanks

32,781 posts

119 months

Friday 29th June 2018
quotequote all
jammy-git said:
Can't see how this wouldn't come under legitimate interest under GDPR.
Legal obligation. The law says details have to be given.

Eric Mc

122,033 posts

265 months

Friday 29th June 2018
quotequote all
DELETED: Comment made by a member who's account has been deleted.
You would be surprised how many organisations have tried to hind from their obligations by citing "data protection" - and that was before GDPR.

I wasn't giving advice by the way, I was just stating how organisations try to worm their way out of their obligations by pretending to be applying legislation.

Eric Mc

122,033 posts

265 months

Friday 29th June 2018
quotequote all
Eric Mc said:
You would be surprised how many organisations have tried to hind from their obligations by citing "data protection" - and that was before GDPR.

I wasn't giving advice by the way, I was just stating how organisations try to worm their way out of their obligations by pretending to be applying legislation.
DELETED: Comment made by a member who's account has been deleted.
Them as well.