Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

GDPR breach by Government dept

  • 15-04-2019 09:16PM
    #1
    janedoe007
    Registered Users, Registered Users 2 Posts: 50 ✭✭


    I got an email from a Government Department last week concerning a data breach.
    Personal data - my name, address, PPSN number, telephone number and details of payments received for 2017 had been sent to a 3rd party.
    The 3rd party have been contacted and have promised to delete the information.
    Gov Dept say that I am not entitled to know who received my data.
    How do I find out who received my personal details ?


Comments

  • #2
    brian_t
    Registered Users, Registered Users 2, Paid Member Posts: 7,176 ✭✭✭brian_t


    janedoe007 wrote: »
    How do I find out who received my personal details ?
    They have the same right to privacy as you do.

    Two wrongs don't make a right.


  • #3
    Riskymove
    Registered Users, Registered Users 2 Posts: 10,903 ✭✭✭✭Riskymove


    brian_t wrote: »
    They have the same right to privacy as you do.

    Not necessarily, for example GDPR doesn't apply to a company


  • #4
    Riskymove
    Registered Users, Registered Users 2 Posts: 10,903 ✭✭✭✭Riskymove


    janedoe007 wrote: »
    Gov Dept say that I am not entitled to know who received my data.

    they are right

    this is the minimum they should include in their notification to you
    a description of the nature of the breach;
     the name and contact details of the data protection officer or other contact point;
     a description of the likely consequences of the breach; and
     a description of the measures taken or proposed to be taken by the controller to address the breach, including, where appropriate, measures to mitigate its possible adverse effects.

    IMO they should at least give some indication of who the 3rd party might be but this should be reflected in what steps they advise you take.

    In any event if you have an issue you should contact the Data Protection Commission who should also have been notified of the breach


  • #5
    MarkR
    Moderators, Regional Midwest Moderators, Paid Member Posts: 11,387 Mod ✭✭✭✭MarkR


    They can't advise who they sent it to, as that would be another breach. If you, for example, received someone's bank details in the post. Bank realises, calls you, and you shred the document. You'd hardly want the owner of the bank statement contacting you directly about it?


Advertisement
Advertisement