P45 sent via e-mail unencrypted

Melted

removed.....

Undervalued

A piece of paper in an envelope isn't particularly encrypted either.

Do you have any particular reason to believe you have suffered a loss as a result or are you just looking to find a way of causing them some grief?

In many cases much of the information on a P45 would be available from other sources if anybody wanted to go looking.

Are you not over reacting?

agrinnall

Were you wearing your tin foil hat when you opened the email? I'd agree with Undervalued that you are overreacting.

Melted

Undervalued wrote: »

A piece of paper in an envelope isn't particularly encrypted either.

True.

Undervalued wrote: »

Do you have any particular reason to believe you have suffered a loss as a result or are you just looking to find a way of causing them some grief?

Ironically when I worked at this company, they made a huge deal of encrypting any files which contained personal data before we could e-mail it across our local network. This is why I'm surprised they would send the document this way. I wouldn't say I'm wanting to cause them some grief, I just want to make sure they what they have done is by the law.

Undervalued wrote: »

In many cases much of the information on a P45 would be available from other sources if anybody wanted to go looking.

I realise its not that difficult to finds someone's address. However is it quite easy to find someones: DoB, NI number easily (and all in one document)?

Undervalued wrote: »

Are you not over reacting?

I'm not in tinfoil mode (yet)

TBagpuss

I don't think there are any specific requirements.

If you were to suffer ID theft which could be traced to that e-mail then you *might* have a legitimate complaint that they were negligent but you would have to suffer some loss or damage.
I trhink you are letting your annoyance with your former employer get to you.

TBagpuss

You could, of course, notify someone senior that the HR department (or whoever was responsible for sending it out) was not keping to the firm's internal policies about sending sensitive or personal documents, but it sounds as though those are interanl policies, they are not laws.

sangie595

OP appears to have a thing about the information people hold/use/publish.

What are the unscrupulous individuals doing with access to your email - have you been careless with your security?

Melted

I've probably watched too many episodes of Mr. Robot.

Undervalued

Melted wrote: »

I realise its not that difficult to finds someone's address. However is it quite easy to find someones: DoB, NI number easily (and all in one document)?

I imagine you intended to say "it is not quite as easy...." in your second sentence?

If so, I agree but I would still suggest it is easier than hacking into email traffic assuming you have taken even basic security precautions.

Sorry but I really do think you are over reacting. Unless there is good reason to believe there has actually been a breach I would move on.

agrinnall

Melted wrote: »

I've probably watched too many episodes of Mr. Robot.

You're Hilary Clinton, aren't you?

Mersey_2

It'd be a DPA breach - reportable to the ICO - if they'd accidentally emailed it to someone else; but, not yourself, as you'd requested the P45.