GDPR Breach?

[Hinam]

Hi i wasn't sure which section to put this in, For context a colleague has made attempts to contact a client in order to discuss the work we do for this, this includes money they owe us etc. My colleague has not been able to get in contact with the client, so rang the client's sister company using a number they located online and spoke in detail about the clients file. I just wanted to know what the legal implications are. I do believe its a breach of confidentiality and GDPR guidelines but i just wanted to make sure.

[PallasAthena]

Date Protection/GDPR rules apply to personal information about individuals not to information about companies. So if it is a company that was being discussed I doubt GDPR is relevant.

[atticus]

On what you say, data held by your company does not appear to have been used or misused.

Do you think that your colleague should not have discussed the client's case with the client? On the face of it, that seems odd.