Mixing
A colleague found on our LAN all employee's resumes/CV. Is this a data breach?
Clash Royale CLAN TAG#URR8PPP
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0;
up vote
1
down vote
favorite
I work in an office in the UK with about 120 staff.
We all have access to the "public drive" which is a LAN for us to share work. There's also thing on there like pics from the Christmas party, etc. It's pretty big.
A colleague recently told me that he found a folder full of every employee's resume/CV. Some he didn't recognise, so they must be people who applied and didn't get a job. He also told me things about other people's previous work.
I'd also heard another colleague say that he once found his own interview feedback, with comments and everything.
I feel like this is a breech of privacy. Is it? I don't know if mine is on there because I cant find it and I don't want to ask and bring attention to it for others to read, but i would hate to see mine on there.
Does this breach data protection laws?
I should note that my line of work makes in necessary for my employees to know my phone number, though probably not my address. But what about the other bits of information. Fair enough its not personal data, but isn't it unfair to have this public?
Note: I'm not asking if the person who found this information committed a data breach, but if the company did by putting it on the public drive in the first place.
united-kingdom privacy
edited 1 min ago
AdzzzUK
3,0983714
asked 44 mins ago
OnlineUser02094
1072
add a comment |Â
up vote
1
down vote
favorite
I work in an office in the UK with about 120 staff.
We all have access to the "public drive" which is a LAN for us to share work. There's also thing on there like pics from the Christmas party, etc. It's pretty big.
A colleague recently told me that he found a folder full of every employee's resume/CV. Some he didn't recognise, so they must be people who applied and didn't get a job. He also told me things about other people's previous work.
I'd also heard another colleague say that he once found his own interview feedback, with comments and everything.
I feel like this is a breech of privacy. Is it? I don't know if mine is on there because I cant find it and I don't want to ask and bring attention to it for others to read, but i would hate to see mine on there.
Does this breach data protection laws?
I should note that my line of work makes in necessary for my employees to know my phone number, though probably not my address. But what about the other bits of information. Fair enough its not personal data, but isn't it unfair to have this public?
Note: I'm not asking if the person who found this information committed a data breach, but if the company did by putting it on the public drive in the first place.
united-kingdom privacy
edited 1 min ago
AdzzzUK
3,0983714
asked 44 mins ago
OnlineUser02094
1072
1
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago
add a comment |Â
up vote
1
down vote
favorite
up vote
1
down vote
favorite
I work in an office in the UK with about 120 staff.
We all have access to the "public drive" which is a LAN for us to share work. There's also thing on there like pics from the Christmas party, etc. It's pretty big.
A colleague recently told me that he found a folder full of every employee's resume/CV. Some he didn't recognise, so they must be people who applied and didn't get a job. He also told me things about other people's previous work.
I'd also heard another colleague say that he once found his own interview feedback, with comments and everything.
I feel like this is a breech of privacy. Is it? I don't know if mine is on there because I cant find it and I don't want to ask and bring attention to it for others to read, but i would hate to see mine on there.
Does this breach data protection laws?
I should note that my line of work makes in necessary for my employees to know my phone number, though probably not my address. But what about the other bits of information. Fair enough its not personal data, but isn't it unfair to have this public?
Note: I'm not asking if the person who found this information committed a data breach, but if the company did by putting it on the public drive in the first place.
united-kingdom privacy
edited 1 min ago
AdzzzUK
3,0983714
asked 44 mins ago
OnlineUser02094
1072
I work in an office in the UK with about 120 staff.
We all have access to the "public drive" which is a LAN for us to share work. There's also thing on there like pics from the Christmas party, etc. It's pretty big.
A colleague recently told me that he found a folder full of every employee's resume/CV. Some he didn't recognise, so they must be people who applied and didn't get a job. He also told me things about other people's previous work.
I'd also heard another colleague say that he once found his own interview feedback, with comments and everything.
I feel like this is a breech of privacy. Is it? I don't know if mine is on there because I cant find it and I don't want to ask and bring attention to it for others to read, but i would hate to see mine on there.
Does this breach data protection laws?
I should note that my line of work makes in necessary for my employees to know my phone number, though probably not my address. But what about the other bits of information. Fair enough its not personal data, but isn't it unfair to have this public?
Note: I'm not asking if the person who found this information committed a data breach, but if the company did by putting it on the public drive in the first place.
united-kingdom privacy
united-kingdom privacy
edited 1 min ago
AdzzzUK
3,0983714
asked 44 mins ago
OnlineUser02094
1072
edited 1 min ago
AdzzzUK
3,0983714
asked 44 mins ago
OnlineUser02094
1072
edited 1 min ago
AdzzzUK
3,0983714
edited 1 min ago
AdzzzUK
3,0983714
edited 1 min ago
AdzzzUK
3,0983714
3,0983714
asked 44 mins ago
OnlineUser02094
1072
asked 44 mins ago
OnlineUser02094
1072
asked 44 mins ago
OnlineUser02094
1072
1072
1
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago
add a comment |Â
1
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago
1
1
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
1
down vote
As you are based in the UK this is a huge issue for your company especially with the new GDPR changes.
Any personal information should be protected including, Address, Phone Numbers and even any employment history.
Other employees should most definitely not be able to access personal comments, interview comments and especially not personal details that should be secure. Report this to your manager/HR straight away otherwise you're going to have a massive issue if any of this is released outside of the company...
As you mentioned you can see the comments/feedback on a spreadsheet. Although not personal... This could cause some other potential issues within the company e.g. bullying, complaints and just unnecessary discussion in general.
answered 13 mins ago
Twyxz
3,60931645
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
As you are based in the UK this is a huge issue for your company especially with the new GDPR changes.
Any personal information should be protected including, Address, Phone Numbers and even any employment history.
Other employees should most definitely not be able to access personal comments, interview comments and especially not personal details that should be secure. Report this to your manager/HR straight away otherwise you're going to have a massive issue if any of this is released outside of the company...
As you mentioned you can see the comments/feedback on a spreadsheet. Although not personal... This could cause some other potential issues within the company e.g. bullying, complaints and just unnecessary discussion in general.
answered 13 mins ago
Twyxz
3,60931645
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
add a comment |Â
up vote
1
down vote
As you are based in the UK this is a huge issue for your company especially with the new GDPR changes.
Any personal information should be protected including, Address, Phone Numbers and even any employment history.
Other employees should most definitely not be able to access personal comments, interview comments and especially not personal details that should be secure. Report this to your manager/HR straight away otherwise you're going to have a massive issue if any of this is released outside of the company...
As you mentioned you can see the comments/feedback on a spreadsheet. Although not personal... This could cause some other potential issues within the company e.g. bullying, complaints and just unnecessary discussion in general.
answered 13 mins ago
Twyxz
3,60931645
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
add a comment |Â
up vote
1
down vote
up vote
1
down vote
As you are based in the UK this is a huge issue for your company especially with the new GDPR changes.
Any personal information should be protected including, Address, Phone Numbers and even any employment history.
Other employees should most definitely not be able to access personal comments, interview comments and especially not personal details that should be secure. Report this to your manager/HR straight away otherwise you're going to have a massive issue if any of this is released outside of the company...
As you mentioned you can see the comments/feedback on a spreadsheet. Although not personal... This could cause some other potential issues within the company e.g. bullying, complaints and just unnecessary discussion in general.
answered 13 mins ago
Twyxz
3,60931645
As you are based in the UK this is a huge issue for your company especially with the new GDPR changes.
Any personal information should be protected including, Address, Phone Numbers and even any employment history.
Other employees should most definitely not be able to access personal comments, interview comments and especially not personal details that should be secure. Report this to your manager/HR straight away otherwise you're going to have a massive issue if any of this is released outside of the company...
As you mentioned you can see the comments/feedback on a spreadsheet. Although not personal... This could cause some other potential issues within the company e.g. bullying, complaints and just unnecessary discussion in general.
answered 13 mins ago
Twyxz
3,60931645
answered 13 mins ago
Twyxz
3,60931645
answered 13 mins ago
Twyxz
3,60931645
answered 13 mins ago
Twyxz
3,60931645
3,60931645
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
add a comment |Â
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
Report to the IT team and the person responible for GDPR immediately, as IT will need to take steps to lock down access.
– AdzzzUK
just now
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fworkplace.stackexchange.com%2fquestions%2f119332%2fa-colleague-found-on-our-lan-all-employees-resumes-cv-is-this-a-data-breach%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
1
Address, personal phone number, emails, and employment history are all personal data and should NOT be shared. That folder should have, at least, access restrictions (and rejected candidates' CV should be deleted to avoid nightmares with GDPR). Inform IMMEDIATELY HR.
– Adriano Repetti
36 mins ago
"I feel like this is a breech of privacy. Is it?". Yes, a big one. "Does this breech data protection laws?". Depends on your jurisdiction. Its certainly a big GDPR breach.
– Polygnome
35 mins ago
Are comments/feedback also personal? Ive just found a spreadsheet with some current employers name on. Comments include "Came across enthusiastic. Did well on case study" etc. These look like internal comments. Not necessarily passed on to the candidate
– OnlineUser02094
25 mins ago
@OnlineUser02094 This is not personal information however should still be kept private from other employees
– Twyxz
21 mins ago
Potential information Security nightmare from what you described. On the way to work, so will answer when I have time
– Anthony
15 mins ago