nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Child Item

Is GDPR a bit OTT?

[Deleted User]

It’s seems that the HSE dept that I deal with will no longer converse in emails due to GDPR and I’m wondering if they have taken it a bit too far.

For context - my father has required carers for some time now and at the beginning this was provided by the same agency the majority of the time. Last year the HSE had a recruitment drive and the same carers moved from being employed by the agency to directly employed by HSE.

Was chatting to one of the carers at the time about hours, mileage, general stuff and said to her could she not email her hours on. She said they wasn’t allowed to do this because of GDPR.

Coming up to Christmas letter from HSE arrives in post asking what days/times carers would be required over holiday period. I filled out form, took a photo and rang up for email address to send it back to. I was told it had to be posted because of GDPR.

HSE now have an embargo on recruitment again and have cut their direct employee hours/days and are using the services of different agencies. It’s been a complete mess with carers not turning up, not being allowed to do certain tasks anymore (that’s another story) and I don’t know who to expect from where and when. So, I called asking to be sent a copy of the rota not looking for individual names but just a breakdown of what days/times would we have HSE carers and what different agencies would be coming on which days (including contact details for office). You guessed it! No can do due to GDPR.

Is this what GDPR means?

Find more posts tagged with

Quick Links

Comments

dudara

GDPR is about the protection (during collection, storage, processing and disposal) of personal data.

It’s fundamentally a good thing, but too many organisations have either (a) misinterpreted it when implementing it or (b) are using it to cover their asses.

Richard Hillman

GDPR and that nonsense where you have to click to accept cookies on every single website. The EU wielding its nonsense.

Deebles McBeebles

Yes it is.

JohnnyFlash

I like it. A business tried to fück me over before Christmas and I put in a data access request under GDPR. Turns out they were forwarding my emails and personal info without permission. I’ve a complaint lodged and I look forward to them getting a fine, just so I can call into their office and tell the owner to go fück himself.

Utter Consternation

JohnnyFlash wrote: »

I like it. A business tried to fück me over before Christmas and I put in a data access request under GDPR. Turns out they were forwarding my emails and personal info without permission. I’ve a complaint lodged and I look forward to them getting a fine, just so I can call into their office and tell the owner to go fück himself.

Did www. inflatablesexdolls.ie use your personal data for nefarious purposes?

[Deleted User]

JohnnyFlash wrote: »

I like it. A business tried to fück me over before Christmas and I put in a data access request under GDPR. Turns out they were forwarding my emails and personal info without permission. I’ve a complaint lodged and I look forward to them getting a fine, just so I can call into their office and tell the owner to go fück himself.

But in my case the personal data about my dad was with his (mine) approval. And the rota could have said HSE staff, Agency 1 staff, Agency 2 staff, etc.

Is GDPR only for electronic communications?

Anteayer

It's the HSE's interpretation of GDPR that’s the issue.
There’s nothing in it that prevents them from communicating with you by email other than possibly they don’t want a paper trail.

They were subject to domestic Freedom of Information laws before that and again that created issues.

Big bureaucracies tend to just jump on “computa says no” or “European regulations” non explanations because they’re an easy catch all.

[Deleted User]

Ah, send something in the post and they can always say “we never received it”. Send something electronically and the proof is there.

BattleCorp

Their excuse is a load of sh1te.

It's the same information regarding whether it is in a letter or in an email.

jimgoose

The problem isn't GDPR, GDPR is a positive and useful thing. The problem is the HSE, and the lengths they will go to in trying to prevent people from being able to prove what malevolently incompetent, lying fuckers they are.

Wibbs

Strawberry Milkshake wrote: »

Ah, send something in the post and they can always say “we never received it”. Send something electronically and the proof is there.

Good advice there. I was dealing with the HSE for a few years and got a couple of “we never received it” answers, so I took to sending the important stuff by registered post. Nipped that in the bud.

jimgoose

Wibbs wrote: »

Good advice there. I was dealing with the HSE for a few years and got a couple of “we never received it” answers, so I took to sending the important stuff by registered post. Nipped that in the bud.

That is textbook HSE.

[Deleted User]

So would this be all over the HSE or just a decision by the dept I deal with? Don’t want to get into an argument with them about it as I need them a lot more than they need me!

Just thought the reason for no email made no sense.

hairyprincess

Out of curiosity, what tasks are they not allowed to do anymore?

Mrs OBumble

Anteayer wrote: »

It's the HSE's interpretation of GDPR that’s the issue.
There’s nothing in it that prevents them from communicating with you by email other than possibly they don’t want a paper trail.

Not really true.

Sending by email is inherently insecure. Unless you have encryption in place, it's like writing the data on a postcard and sending it thru the mail.

Pre GDPR lots of organisations took the risk and emailed things anyway. But now there are big penalties if just one privacy freak justifiably complains about how their data is managed, so the organisations are saying "no, the risk is now too large".

So we all have to put up with the scenarios you describe.

Some are being too zealous - but for example in the agency vs HSE rota example there is the data of both the patient and the employees involved. Some privacy-freak families would even see the fact that someone in the family is getting home help as sensitive data.

JohnnyFlash

Utter Consternation wrote: »

Did www. inflatablesexdolls.ie use your personal data for nefarious purposes?

Never heard of them - not my scene. At least you found something to go down on you.

BattleCorp

hairyprincess wrote: »

Out of curiosity, what tasks are they not allowed to do anymore?

Work

Sultan of Bling

I find a lot of places try to get out of answering any sort of query by using the line "we can't disclose that due to GDPR".

When they use it on me, I always ask them under what section of the GDPR act are they referring to, cue stony silence.

[Deleted User]

Agencies can’t shave someone now just Incase they knick them. HSE can even though their qualifications and training are exactly the same.

Not an issue for us as there’s others around but if my dad was on his own, what with him being paralysed down one side of his body, would be a problem if all he had was agency staff.

The J Stands for Jay

Mrs OBumble wrote: »

. Some privacy-freak families would even see the fact that someone in the family is getting home help as sensitive data.

The legislation gets to decide what is sensitive data, not some oddball family member.

jimgoose

Mrs OBumble wrote: »

Not really true.

Sending by email is inherently insecure. Unless you have encryption in place, it's like writing the data on a postcard and sending it thru the mail.

Pre GDPR lots of organisations took the risk and emailed things anyway. But now there are big penalties if just one privacy freak justifiably complains about how their data is managed, so the organisations are saying "no, the risk is now too large".

So we all have to put up with the scenarios you describe.

Some are being too zealous - but for example in the agency vs HSE rota example there is the data of both the patient and the employees involved. Some privacy-freak families would even see the fact that someone in the family is getting home help as sensitive data.

I can guarantee you that the HSE are using the "GDPR" line for their own nefarious reasons, and not because they give a scuttery freestyle fuck about anyone's privacy.

Utter Consternation

JohnnyFlash wrote: »

Never heard of them - not my scene. At least you found something to go down on you.

Apologies compadre, seemed like the type of thing you'd be interested in.

My mistake.

[Deleted User]

McGaggs wrote: »

The legislation gets to decide what is sensitive data, not some oddball family member.

But I’m giving the permission for our family. When there’s a car outside that says “Carers” on it, everyone knows we’re getting assistance anyway.

JohnnyFlash

Utter Consternation wrote: »

Apologies compadre, seemed like the type of thing you'd be interested in.

My mistake.

No problems, hombre. They might have a model in stock that looks like Mary Lou McDonald - seems like the type of thing you might be into.

Utter Consternation

JohnnyFlash wrote: »

No problems, hombre. They might have a model in stock that looks like Mary Lou McDonald - seems like the type of thing you might be into.

I don't like to bring politics into my sex life. It's the anti-dote to a horn.

Seth Brundle

The HSE being over-zealous with the OP and at the same time not giving a shíte about another poster...
HSE Data Breach

branie2

I certainly think so

[Deleted User]

Was in a hospital in the midlands a few years ago. They had files stacked everywhere, in corridors etc. I am willing to bet much of it contained sensitive patient data. So much for GDPR only applying to electronic records and paper records being somehow safer !

uck51js9zml2yt

[Deleted User] wrote: »

Was in a hospital in the midlands a few years ago. They had files stacked everywhere, in corridors etc. I am willing to bet much of it contained sensitive patient data. So much for GDPR only applying to electronic records and paper records being somehow safer !

Gdpr only came into effect 25 may 2018.

Have you a point to make other than files could be taken by anyone for any purpose.?

TheChizler

My GF used to do some admin work for a HSE office pre GDPR days, she wasn't allowed to email any personal data, fair enough, but there was zero issue with faxing it. It would be so easy for you to put in the wrong fax number or for the wrong person to pick it up from the machine. Bizarre.