General Query

[Benjarnii]

Hi.

I have a general query.

Am I breaking any data protection by copying colleagues into an email from another colleague? The colleagues are all from the same organisation and all have access to HR files and other confidential information. The company is a counselling & therapy business if that helps.

Secondly, if we receive an enquiry from a potential client, would I break GDPR/data protection by copying in my colleagues to the enquiry? The enquiry was sent to our general email account which is an alias of all our personal accounts so we would all receive a copy of the original enquiry.

Thanks in advance.

 

[Ozzy]

Not if it's in the day to day legitimate activities of your business. Just think how impossible it would be for healthcare/doctors/nurses to operate if they couldn't communicate with each other about patients.

 

[MOIC]

Would patient confidentiality be compromised in any way?

 

[WaveJumper]

What you might want to think about if you are sharing personal data within your business is have you put in place / produced a data sharing agreement. Who is the controller and who is accountable for what happens to the data / personal information. I would strongly recommend you have a plan in place detailing how you control / monitor and who is actually allowed to have access etc.

Be worth a trip to the ICO website