Am I breaching the GDPR (or any other act/law) by displaying a staff rota with only first names, days, times & tasks in a corridor in my department that other departments staff walk along? They have never stopped to read our notice board or even know there is a rota on there,  but I’d like to know if this could be brought up as any type of breach. Also, is a member of my staff taking a photocopy or photograph of this rota every week a breach? If a photocopy l, I don’t know if it leaves the work place although my suspicion is that it does. Obviously if a photo is on her phone, then it will do.