GDPR breech

[Fezzy24]

Hi all wondering where I stand with this, so basically I work in a supermarket as a supervisor, we have a room for management and supervision to use, it's where the managers are most of the time, anyway the room is never locked so anybody is free to walk in looking for management etc, so basically to cut a long story short a manager has printed of a piece of paper that contains my full name,d.o.b full address and NI number which I didn't know about and this peice of paper was just placed on the window sill next to where the management rota is, now my issue is anyone know could of stolen my details or passed it on the fact I was able to see it means other people could of as well, I sent an email to the store manager and the person who I know who printed it off because there handwriting was also on it but had no response, where do I stand??

[ULA]

Your employer does need to collect personal data such as you have set out from their employees, they have a legal obligation to safeguard their employees’ data.

I would suggest that you copy the email you have sent to the store manager and the person who you believe printed it off to the HR department and or a regional manager.

You may also want to think about contacting the Information Commissioner's Office linked to below who can also advise what you can do.

https://ico.org.uk/global/contact-us...public-advice/

[PallasAthena]

As ULA says your employer does need to collect that data to carry out their employer responsibilities but they are also legally required to keep that information secure and only disclose it within the company to those with a legitimate need to know.

Lots of staff (most staff?) may legitimately need to know your name on a supervisor/management rota or just because they work with you, but only a few, such as HR, need to know your dob, address and NI. So your employer is likely to be in breach of their data protection obligations by disclosing that data to other staff.

As advised complain about the data breach to higher management and be prepared to follow up with ICO if the response isn't satisfactory.