Occy Health referral for my team - too much info?
Discussion
Mods - if better in Jobs & Employment Matters please move - it's about GDPR mainly. Anyway:
I have agreed with a member of my team to refer them to our employer's occupational health provider to see what more we could do to accommodate their health problems at work.
My employer outsources its occupational health service to a third party. The third party requires that users of its service create an account for the web portal via which users interact with said third party's support staff.
In order to set my account up I am being asked for my home address and date of birth (via my employer's HR dept) by this third party provider of a workplace service.
I've been given no information on how my data's to be processed/stored/used/shared/deleted etc. other than the assertion that it's in case "I need a referral in the future" (which doesn't seem like a valid reason to gather my data now.
Am I out of order in thinking that this is out of order?
Do I need to recalibrate my tinfoil hat?
Bit of both of the above?!
Scuse formatting, on mobile, etc.
I have agreed with a member of my team to refer them to our employer's occupational health provider to see what more we could do to accommodate their health problems at work.
My employer outsources its occupational health service to a third party. The third party requires that users of its service create an account for the web portal via which users interact with said third party's support staff.
In order to set my account up I am being asked for my home address and date of birth (via my employer's HR dept) by this third party provider of a workplace service.
I've been given no information on how my data's to be processed/stored/used/shared/deleted etc. other than the assertion that it's in case "I need a referral in the future" (which doesn't seem like a valid reason to gather my data now.
Am I out of order in thinking that this is out of order?
Do I need to recalibrate my tinfoil hat?
Bit of both of the above?!
Scuse formatting, on mobile, etc.
Cheers for replies so far guys, might not need the tinfoil hat right now.
Don't see how just anyone could find my address and d.o.b. (as suggested above).
Some info omitted from the OP:
Helpful lady from HR suggested that I could put the office address, then her boss said I couldn't and must put my details in or I couldn't make the referral.
I stuck the third party's head office address and an approximation of the CEO's date of birth (both from Companies House) in on Thursday, and they did set an account up for me.
Logged-in today and lo and behold I can see the records (name and home address) of staff in my wider office!
So they want my data and demonstrably can't store it securely.
It's a point of principle now really - the OH lot were f
king ste when I called them up about something previously too.
Don't see how just anyone could find my address and d.o.b. (as suggested above).
Some info omitted from the OP:
Helpful lady from HR suggested that I could put the office address, then her boss said I couldn't and must put my details in or I couldn't make the referral.
I stuck the third party's head office address and an approximation of the CEO's date of birth (both from Companies House) in on Thursday, and they did set an account up for me.
Logged-in today and lo and behold I can see the records (name and home address) of staff in my wider office!
So they want my data and demonstrably can't store it securely.
It's a point of principle now really - the OH lot were f
king ste when I called them up about something previously too.echazfraz said:
bhstewie said:
hstewie said: And 2 minutes after I post I'm going to backtrack and say yes, that's genuine cause for concern 
I was threatened with disciplinary for putting false details into the system, they've now been threatened with GDPR.Cherry on the top is we're a govt. dept!
Cynical? Mio ?
Gassing Station | Jobs & Employment Matters | Top of Page | What's New | My Stuff