is this allowed?

hoodwinked

it has come to our attention that my husbands details have been posted publicly online by a public service body, they took them from an application for something irrelevant to his details but that these details were needed, (it's not money/revenue related)

they have posted his full name, his full current address, his full telephone number, his date of birth, his occupation, his place of work, his former address...etc also his referee's name and private number and full address. all without permission from both of them. these are details my husband would never post anywhere online.

the referee gave their details after being told as we were they were only being provided so they could give my husband a reference. he never gave permission to have these posted online.

the first page of the form has the typical Data protection paragraph with a "tick this box if you are satisfied to receive direct marketing" he left this un-ticked.


are they allowed to do this?

usernamegoes

hoodwinked wrote: »

it has come to our attention that my husbands details have been posted publicly online by a public service body, they took them from an application for something irrelevant to his details but that these details were needed, (it's not money/revenue related)

they have posted his full name, his full current address, his full telephone number, his date of birth, his occupation, his place of work, his former address...etc also his referee's name and private number and full address. all without permission from both of them. these are details my husband would never post anywhere online.

the referee gave their details after being told as we were they were only being provided so they could give my husband a reference. he never gave permission to have these posted online.

the first page of the form has the typical Data protection paragraph with a "tick this box if you are satisfied to receive direct marketing" he left this un-ticked.


are they allowed to do this?

No, the data protection acts would not allow this (I am assuming you are being accurate when you say he was not informed that this would happen)

hoodwinked

usernamegoes wrote: »

No, the data protection acts would not allow this (I am assuming you are being accurate when you say he was not informed that this would happen)

it's a new policy of this body he was not aware of, but in saying that he has no choice but to go through this process with this body anyway,

so he's stuck between a rock and a hard place,

i just find it shocking a public service body can be so reckless with your private details especially ones you wouldn't put online yourself, and that leave you open to all sort of problems.

SpaceTime

I've heard of similar stories where someone was involved in the board of a particular organisation that was seeking to receive state funding. They publish the whole document online.

hoodwinked

SpaceTime wrote: »

I've heard of similar stories where someone was involved in the board of a particular organisation that was seeking to receive state funding. They publish the whole document online.

it's nothing like that, but i am wondering why they can't omit pages with personal information (that is irrelevant to the process and purely for communication purposes anyway) or redact it when posting it publicly online.

usernamegoes

hoodwinked wrote: »

it's nothing like that, but i am wondering why they can't omit pages with personal information (that is irrelevant to the process and purely for communication purposes anyway) or redact it when posting it publicly online.

http://www.dataprotection.ie/ViewDoc.asp?fn=/documents/responsibilities/3bii.htm&CatID=54&m=y

Rule 6 implemented in section 2(1)(c)(iii) of the Act.

You need to consider if this further processing is relevant or excessive to the purpose that needs to be achieved. If not ask them t redact what is not relevant or what is excessive.