Personal Information Lost from my Employer Data Protection Negligence?

Vectis

What do you mean when you say they've 'lost' your data? Lost what? Did they delete digital files or was it a case of paperwork being left on a train etc?

What information is it?

What exactly would you be claiming for? Just because someone loses something doesn't mean you're owed money. It just means they've lost your data somehow. How has it affected you?

strokebow

Hi,

Basically they say they were hacked and all of my personal details were stolen off the system. they didn't divulge the specific nature of the details.

I'm never claimed compensation before and likely wont in this case either. Just makes me sick that people can lose your details and nothing happens to them. Surely having proper encryption isn't too hard. Whats the point of the data protection act if it cant protect you?

I smell a rat when they try to distance themselves to the nth degree.

xapprenticex

TBH thats like me having you look after my bike, someone breaks into your house and steals it along with your TV and me getting mad at YOU for losing my bike.

Assuming the hacking story is true.

Do bear in mind, they are your employer, its best to have a job over causing issues and ending up with nothing or being managed out.

dlmcr

Not what you want to hear but to save you a bit of time here is a story from the other side of the fence: Speaking as someone who has contracted for the NHS a few times previously (thanks to IR35 changes no more) you would not believe the lax attitude taken towards security and confidentiality. If one were so inclined and one had a little technical knowledge and the physical ability to access them it would be perfectly possible to physically take incredibly confidental data relating to staff and patients, information that has considerable value to certain people. There is no accountability within the NHS, there can't be, it would be an incredible concept for named individuals to be custodians of data and to be ultimately accountable for what is happening to it - such a concept just doesn't exist in the public sector (I am not saying it is anyone's fault, as part of senior management thinking processes it just didn't occur to anyone that something like that might be important) , there is no knowledge / tracking of what data is doing where it is going, and who is accessing it for what purposes. As for encryption, don't make me laugh. To be honest speaking from experience it is incredible that there haven't been significantly more data leaks than there have been.. the end.

JamoLew

Sounds like you have been caught up in the "data breach" at Landaeur last year.
If you are concerned, have a chat with your information governance team who will be able to advise on exactly what data was lost.
It can range from Initial and surname only, all the way to full name, date of birth and ni number. Don't panic untill you know the severity.
I believe Landaeur are providing one years membership with Experia for those people whose information may be used for unwarranted activity, your Info Governance Dept will advise you if you are in this group.
Several people at my trust have also got caught up in this, so you are not alone, Google also provides some info.
Hope this helps somewhat

strokebow

It gets worse.
I recently got a letter through the post from my previous NHS employer (different trust) who I last worked for over 5 years ago.

Subject: Data Security Breach.

Doesnt say if it is lined to the letter I got from my current hospital. However, it has a lot more information. It tells me my name, DOB and NI number were taken.

They have offered me a 24 monthmembership of UK Experian ProtectMyID.

They also give me an actual real person who I can contact.


Any further advice?