The new European regulation brings the data protection laws of the member states to a common denominator, while giving people more control over their data and threatening companies with huge penalties.
However, nobody made a clear breast of it . This was well illustrated in the case of in-store complaint books: in mid-April a new kind of complaint book could be needed to prevent shoppers from seeing the personal information of those who entered it. Later, a statement from the Ministry of Innovation and Technology refined this to the point that no brand new complaint book was needed, simply removing and locking entries from existing ones to prevent other users from accessing them. But last autumn, news that GDPR could make names disappear from Vienna intercoms also seemed like a case in point.
These remind us of a bunch of other everyday situations that have taken for granted, but if we take the spirit of GDPR seriously, we may have to sacrifice them on the altar of stricter data protection.
Claims Book
For years, it hs been clear that it is not good practice for customers to start browsing other customers' clever and bad entries, with names and other information. Care must be taken to prevent others from having access to records if they are entered in the customer's book, they must be removed immediately and stored in a locked position or made available to the authority upon request.
Mailbox/ buzzer
That is the other extreme. Of course, there is a situation where someone does not want to put their name on the buzzer (for example, a protected witness), but these should be treated separately and not all intercom / mailboxlabels removed.
Signature Circulars
Not only is it political, but any signatures are problematic if others can see the details of the other participants. Just think, I can easily find out which of my neighbors recommended the candidate for that party. My favorite is when at a 200-person event (because "we can't provide so many host tests"), the attendance list is circulated to name and contact information - while everyone now has a handheld "scanner".
Paper Newsletter Subscription
Collecting paper by itself is perfectly fine if the other conditions are met.
School Rules, Exams, Competition Announcements
In fact, let's take public responsibility here. If we look at all of these carefully, we would surely find that the trouble is great. The reader can be trusted that there is a big problem with data management practices or with GDPR.
Yearbook, Publicly Displayed Pictures
These have recently been the subject of a resolution, and it is legitimate for a school to demonstrate, through a weighing test, that it is necessary and proportionate. I would dare to bet that no school has passed the appropriate test, so the whole practice is illegal. Speaking of pictures I have been asked to only photograph my own child at baby-swimming. Not that it was bothering only surprising to be advised pre baby swim-class
NAme displayed publicly at Restaurant Reservation
This is also problematic. An anonymous “RESERVED” board serves this purpose, and the bartender keeps a record of them and manages the data until the end of the day.
The names of a taxi caller may be heared by other passangers in the car
And the title as well. And in an ambulance we can even find out what's wrong with that person. Outdated technology, it would not stand the test of GDPR. The case is analogous to me sending emails to all clients and accidentally typing all email addresses into the recipient field, not BCC (Bcc) (guily there...).
Public Announcement at Shopping Mall
("Olivia is waiting for mommy at the information desk")
For borderline cases. If it is a baby sitting room, ask for a phone number for such cases. If the baby is lost in the shop, then the announcement will be justified and legitimate - without a better tool.
Supermarket Employee Name Tag
(“Waiting for Erice at Cashier 2”)
It passes.
Name tag for Fast Food Restaurant Employees
This also fits in, making it easier to get in touch with a job where communication between the guest and the seller is very important. Identification may be important if you arrive late or do not arrive at the table with the promised menu. But it might be a good solution to the urban legend that the fast food restaurant has some nameplates for boys and girls, and if the new colleague comes, he'll be the new Jordan.
Radio ("I would like to dedicate this song to John who is now at XY Restaurant at Oxford Street")
Problematic. Compared to that, even more, when the unsuspecting John is tuning in, in a live broadcast to convey the message.
Called by Your Name at The Doctos's
It is unreasonable and therefore unlawful to call by name with a serial number that can be replaced.
What all of this will really be sanctioned by the National Data Protection and Freedom of Information Authority (NAIH), which will be most closely demonstrated by the practice of the next period.
Comments