- Original Poster
- #1
I have had a grievance against my company and put in a formal access request for data (specifically emails between myself and HR and a third party, relating to the issue in question). I have the ones sent between me and HR but not the third party, whose actions led to my grievance. The company brought in hard copies to our meeting.
However, when they sent the final outcome, whilst the outcome letter references the paper documents, none of them were attached. I queried this, and the HR department verbally told me the emails have been deleted from the server so they can't give me copies. I asked for that in writing and they have not responded to my email (presumably because they don't want me to have it in writing that they have destroyed evidence). I sought advice from Citizens Advice and the lady's view was, if the company's deliberately deleted evidence, it could be a much more serious issue but wasn't sure if it comes under a data breach or a breach of trust (or both). Would this come under a GDPR breach?
However, when they sent the final outcome, whilst the outcome letter references the paper documents, none of them were attached. I queried this, and the HR department verbally told me the emails have been deleted from the server so they can't give me copies. I asked for that in writing and they have not responded to my email (presumably because they don't want me to have it in writing that they have destroyed evidence). I sought advice from Citizens Advice and the lady's view was, if the company's deliberately deleted evidence, it could be a much more serious issue but wasn't sure if it comes under a data breach or a breach of trust (or both). Would this come under a GDPR breach?
