4 ms·
> I'm not sure that's a violation of GDPR. I think the initial communication is obviously not the fault of the company, but as soon as they are aware and refus
by richrichardsson 6y ago
> I'm not sure that's a violation of GDPR.
I think the initial communication is obviously not the fault of the company, but as soon as they are aware and refuse to put right the situation, I think they are very much at fault.
- icu 6y agoExactly, honest mistakes can, and do, happen. The cause should be investigated and if minor, logged on a register; if serious, it must be reported to the regulator.
- richrichardsson 6y agoThe initial email was pretty bad, I immediately deleted it and contacted them, but it included: - Full name - Date of Birth - Some kind of National ID number - Bank account details - Address If I was of a lesser moral character I'm sure I could have been very naughty with that information.