Hi, I work for the NHS. I have an individual shift pattern that is unique to me, as do the other 17 people I work with … we all have different rotas but do the same job.
In this department there are 5 other people that work in a similar but not the same job and have a totally different shift pattern. One of the 5 has decided that he does not like the fact that I get more days off than him. He has been given by management a copy of all 18 members of staff individual shift patterns and has been able to identify each other persons work patterns, days off and potential overtime earnings etc…
Is this a GDPR breach?
Nick
Alasdair Taylor's Answer
There is not enough information here to determine whether there has been a breach.
I do suggest however that you start by looking at what the employer’s privacy policy says about this data and this processing, taking into account some of the specific rules in the GDPR, including:
https://gdpr-info.eu/art-5-gdpr/
https://gdpr-info.eu/art-6-gdpr/
https://gdpr-info.eu/art-14-gdpr/
https://gdpr-info.eu/art-32-gdpr/
