Tweet
Under the GDPR rules, if I write to a company on matters specific to them, are they allowed under the GDPR, to give copies of my letter to a third party individual who is not the subject of the letter, or whose name is not mentioned in the letter,
Loading...
-
Tags: None -
This depends on who the third party is. If its a law enforcement agency for example, then exclusions may apply that mean that your details would be provided. If it was another individual who was not named within the letter then the general answer would be NO as GDPR only applies to personal information about the Data Subject. If they are not named within the letter then that should be fine as long as they cannot be identified from the contents. -
Interesting... I find it incredible that an organisation can give anyone copies of a letter you send them so anyone can see what you have said.Originally posted by monsal View Post
In the instance I refer to I made a comment about an 'individual' having done something, but I did not name them. At a public meeting a short while after the individual publicly stated that he had come into possession of a letter in which I had stated something about him (despite my not having named him in the letter) and denounced me publicly as a liar. The only way he could have obtained a copy of the letter is from the Directors of the company that I sent the letter to. I subsequently had to obtain evidence that what I had written was in fact true.
How is that not a breach of data protection.Comment
-
Update:
I have spoken to the ICO who have confirmed that there was a data breach and have advised me on the way forward.Comment
Comment