GDPR non compliance

[scotro3]

Hi,

I'm not sure if I'm posting this in the right forum so apologies if I haven't :-)

The company I work for is very lax regarding their obligations about handling and storing personal data to say the least. Apart from paying the £40 a year fee to ICO they are doing nothing. People's personal files have been lying about the office for everyone to read, their payslips are being forwarded to 3rd party companies via unsecure emails and we don't know what happens to them after that. Its a free for all to be honest.
Would ICO be even interested to investigate this? as they state on their website that their staff is working from home so I can't really see them swooping in to do an inspection.

[echat11]

Sure they would be interested, they want people, companies to get GDPR right, for loads of reasons.
Would it not be an idea to mention your concerns to the Data Protection Officer at your company?
it's in the interests of everybody that data is handled correctly.

[scotro3]

The company doesn't have a Data Protection officer or any processes in place.

[echat11]

The company doesn't have a Data Protection officer or any processes in place.

So if you sent the company a Subject Access Request, who would handle it?

[scotro3]

No idea, probably the CEO