Calling any current or recent Met police
Calling any current or recent Met police
Author
Discussion

Vaud

Original Poster:

59,939 posts

186 months

Thursday 31st July 2014
quotequote all

Need some advice on contacting the right bod to flag a data breach. Tried the web site but no joy and don't want to waste 101's time... nor hassle information commissioner as Met should probably deal with first.

Thanks...

aw51 121565

4,773 posts

264 months

Thursday 31st July 2014
quotequote all
In general terms, what kind of organisation made the alleged breach? There will be (and I'm talking about an organisation of any size such as the NHS, Police, Local Authority, Bank etc) a Data Controller who you should contact in the first instance.

However, this is general advice only in the absence of any real info smile and as such may not be applicable or relevant to your situation.

Vaud

Original Poster:

59,939 posts

186 months

Thursday 31st July 2014
quotequote all
aw51 121565 said:
In general terms, what kind of organisation made the alleged breach? There will be (and I'm talking about an organisation of any size such as the NHS, Police, Local Authority, Bank etc) a Data Controller who you should contact in the first instance.

However, this is general advice only in the absence of any real info smile and as such may not be applicable or relevant to your situation.
Thanks. Met Police officer at a mid to senior level emailed confidential HR data to an email address. Unfortunately they made an error in the email address and it came to me, not the intended recipient.

Problem is I can't find who to call or email, just forms and policies.

I also want the intended recipient to get the contents as it is not trivial content.

ging84

9,548 posts

177 months

Thursday 31st July 2014
quotequote all
What are you trying to achieve?

Vaud

Original Poster:

59,939 posts

186 months

Thursday 31st July 2014
quotequote all
ging84 said:
What are you trying to achieve?
The right person gets the data.
The right bit of Met Police has a quiet word (hence my comment on not flagging to information commissioner)
The officer gets to fix it but it doesn't get swept under the carpet by him for the error, which whilst basic, was v easy to check.

Having seen the content, I want to ensure there is a formal record to ensure the individual isn't penalised for not receiving the email, etc.


darreni

4,549 posts

301 months

Thursday 31st July 2014
quotequote all
Vaud said:
Thanks. Met Police officer at a mid to senior level emailed confidential HR data to an email address. Unfortunately they made an error in the email address and it came to me, not the intended recipient.

Problem is I can't find who to call or email, just forms and policies.

I also want the intended recipient to get the contents as it is not trivial content.
There should be a footer at the end of the email stating " if you are not the intended recipient, please delete immediately"
Or a variant of.
Just do as it says, or reply to the sender & say "sorry, I don't believe this was intended for me"

No need to do anything else.

Koofler

616 posts

197 months

Friday 1st August 2014
quotequote all
Can't you just reply to the email explaining that you aren't the intended recipient and assure him/her that you will delete said email?

Cuts out all the fluff and achieves the required end result.

Vaud

Original Poster:

59,939 posts

186 months

Friday 1st August 2014
quotequote all
Update: Spoke to Met Police Public Access Office this morning (which is where, it turns out, the data officer also resides) - who were very helpful and viewed it as a security breach and would look into it.

I asked them explicitly if I should have followed the advice in the footer, and just delete or reply, and they said no - it is a security breach and should be checked internally in case there are other issues and other data being sent out to non secure email addresses.

XCP

17,749 posts

259 months

Sunday 3rd August 2014
quotequote all
What's the point of the footer then?

Vaud

Original Poster:

59,939 posts

186 months

Sunday 3rd August 2014
quotequote all
XCP said:
What's the point of the footer then?
A good point.

turbobloke

117,509 posts

291 months

Sunday 3rd August 2014
quotequote all
Vaud said:
XCP said:
What's the point of the footer then?
A good point.
It makes the right noises. See under 'no refunds'.

Good result btw.

Vaud

Original Poster:

59,939 posts

186 months

Sunday 3rd August 2014
quotequote all
turbobloke said:
It makes the right noises. See under 'no refunds'.

Good result btw.
I thought so. V efficient as well, 5hrs I think from reporting to receiving a summary of their actions in a polite letter.

Mr E

23,096 posts

290 months

Sunday 3rd August 2014
quotequote all
XCP said:
What's the point of the footer then?
The usual 'to be seen to be doing something without actually doing anything'?

gaz1234

5,233 posts

250 months

Sunday 3rd August 2014
quotequote all
Click X
Press delete

cossy400

3,468 posts

215 months

Sunday 3rd August 2014
quotequote all
gaz1234 said:
Click X
Press delete
Did you read the rest of the comments??