After some advice

[Rosarch]

Would be great to get some feedback on a hypothetical scnerio.

Employee 1 sends an email to colleagues, the email includes the name of a potential employee and feedback about that potential employee from an ex employee.

If the potential employee submits a request to access their personal information, would this include visability of this email?

Thanks

 

[Simon Plummer]

In a nutshell yes, if the individual concerned is specifically named/identifiable. We have to be careful in these scenarios. By the sounds of it,there is a potential risk to the individual based on the conversation being had therefore they have a right to have it corrected should it be incorrect for example.

This is where the likes of Office365 etc (other providers are available ) really come into play allowing you to search for certain terms (i.e. a name) across your entire estate in one simple search (exchange, SharePoint, one-drive etc)

 

[Mike Etherington]

I suspect there are tons of examples of "emails about people", both employees, potential employees, ex-employees and more!! The principle we are promoting is to assume the person being discussed will see the email! And to make sure communication about individuals is objective and has a purpose. This isn't really new, but I bet there are lots of emails in the process of being deleted right now! As they are all potentials for being disclosed under GDPR