got handed some email addresses by mistake

[glengraving]

Inspired by another thread of a user asking how to get free contacts lists to promote their business,
on the subject of dubiously acquired contact info - one of the sales reps for a wholesaler I use has been CC'ing a bunch of customers instead of BCC'ing when sending out newsletters etc.
I just laughed at first, but what if I decide to use these email addresses as a jumping off point to get clients for a relevant B2B service I'm starting up, I'm in the clear right?

 

[Mark T Jones]

Why would you be in the clear - you are using data you know to be non-opted

That said, if they are genuine b2b, DPA may not apply

 

[glengraving]

Maybe we all did opt in to have our details plastered everywhere, I didn't read the fine-print tbf.
It is B2B, and the alternative is quite simple, just requires a bunch of googling to make my own list, I just find it funny that a pre-vetted and relevant list fell into my lap. If nothing else, it's a jumping off point, I can google to check that the email address is listed on their website publicly. We can bond over the ineptitude of that one sales rep when building new trade connections

 

[Newchodge]

Maybe we all did opt in to have our details plastered everywhere, I didn't read the fine-print tbf.
It is B2B, and the alternative is quite simple, just requires a bunch of googling to make my own list, I just find it funny that a pre-vetted and relevant list fell into my lap. If nothing else, it's a jumping off point, I can google to check that the email address is listed on their website publicly. We can bond over the ineptitude of that one sales rep when building new trade connections

You will be using email addresses that you do not know are legitimate. You would be at risk.

 

[Mark T Jones]

Maybe we all did opt in to have our details plastered everywhere, I didn't read the fine-print tbf.
It is B2B, and the alternative is quite simple, just requires a bunch of googling to make my own list, I just find it funny that a pre-vetted and relevant list fell into my lap. If nothing else, it's a jumping off point, I can google to check that the email address is listed on their website publicly. We can bond over the ineptitude of that one sales rep when building new trade connections

What we'd do and what we'd advise may differ...

 

[ctrlbrk]

This article reiterates what was discussed years ago, i.e. if an email address is something like

[email protected]

then it's not regarded as personal data, but if it is something like

[email protected]

then it is regarded as personal data as far as GDPR is concerned.

GDPR issues - Do work emails count as personal data? - Cognitive Law

Do work email addresses count as personal data? A question asked frequently when referring to the GDPR rules. Click on the link to read further.

www.cognitivelaw.co.uk

 

[glengraving]

looking at these emails, some of them are clearly personal wouldn't touch with a barge pole.
I'd notify the company of their poor GDPR'ing, but I have a disputed invoice from a couple years ago that I'm happy to just forget about so have been happy to not contact them since their failure to remedy, not poking that bear (can you tell that it isn't the most well-run company?)

 

[Ozzy]

It very literal terms;
1. The person sending the emails has caused a ‘data breach’ which is reportable to the ICO.
2. Sending to those emails, which as you confirm are personal, would not be in line with the purposes by which the data was provided. So again, would be a breach.

 

[John Martin]

looking at these emails, some of them are clearly personal wouldn't touch with a barge pole.
I'd notify the company of their poor GDPR'ing, but I have a disputed invoice from a couple years ago that I'm happy to just forget about so have been happy to not contact them since their failure to remedy, not poking that bear (can you tell that it isn't the most well-run company?)

You could contact them and politely tell them they are breaching GDPR. That way at least they know there's a problem and hopefully they won't put anyone else's data at risk.

If they decide to come after you for the disputed invoice, you could always say that you are considering contacting those people involved and as well as reporting them yourself for GDPR violations.

Depending how bad things are, the potential fines for GDPR breaches could be way more than the cost of your disputed invoice. Not to mention those customers who might not be happy with them once they know their data has been breached

 

[ctrlbrk]

If they decide to come after you for the disputed invoice, you could always say that you are considering contacting those people involved and as well as reporting them yourself for GDPR violations.

Sorry to say, I think this is really bad advice.

I'd notify the company of their poor GDPR'ing, but I have a disputed invoice from a couple years ago that I'm happy to just forget about so have been happy to not contact them since their failure to remedy, not poking that bear

OP claimed not wanting to "poke that bear", which is fair enough.

Suggesting OP contacts them out of politeness but then threatens blackmail if reminded of an outstanding invoice sounds to me like blackmail and would put OP immediately on the wrong end of the law IMO.

Why even suggest it.

 

[John Martin]

I didn't say that OP should blackmail them, I just said they could mention they were considering certain actions. But you're probably right, best to be on the safe side.

 

[HFE Signs]

Don't do it, simply isn't worth it and what is the likelihood of getting an order out of it - all you'll do is make yourself look desperate by hijacking an email list that isn't yours.

The risks outweigh the gains, therefore it isn't worth doing

 

[ethical PR]

looking at these emails, some of them are clearly personal wouldn't touch with a barge pole.
I'd notify the company of their poor GDPR'ing, but I have a disputed invoice from a couple years ago that I'm happy to just forget about so have been happy to not contact them since their failure to remedy, not poking that bear (can you tell that it isn't the most well-run company?)

Have you seriously nothing better to do than post this sort of tosh?

 

[Paul Kelly ICHYB]

You could always reply to the email (to everyone) with a covert sales message!!!

As mentioned, the sender is technically breaking data regs.

You could assume that all of the email addresses are business relevant and send emails based on genuine interest......

However, you would be skirting the law and at risk...

 

[DontAsk]

I would "accidentally" reply-all pointing out that they are in breach.

I did this once to, I think, Virgin Media. Profuse apologies followed from them.

 

[glengraving]

You could always reply to the email (to everyone) with a covert sales message!!!

As mentioned, the sender is technically breaking data regs.

You could assume that all of the email addresses are business relevant and send emails based on genuine interest......

However, you would be skirting the law and at risk...

But to be serious, of course I wouldn't use the list [directly], it's just fun to think through hypotheticals. I'm a good boy

Have you seriously nothing better to do than post this sort of tosh?

Bit rude mate
I posted this because I thought it would be an interesting situation for the forum to discuss. Have you nothing better to do than read it?