Associate
- Joined
- 3 Feb 2019
- Posts
- 747
The person who sent the email to you is the one who has breached data protection and confidentially rules. Unless you work in a department that specifically deals with sensitive information, i.e HR, payroll etc, you have no obligation to not repeat what you have seen. Think of it as walking past a room with an open door and hearing a conversation which you then repeat.
The company may choose to take action against you with internal policies, such as bringing the company into disrepute, but legally you havent done anything wrong and certainly didn't have the "men's rea" to use the information for personal gain or loss to others.
The fact the email was not security marked and was allowed to be sent to the wrong people highlights wider issues in the company with incompetence which could lead to litigation
The company may choose to take action against you with internal policies, such as bringing the company into disrepute, but legally you havent done anything wrong and certainly didn't have the "men's rea" to use the information for personal gain or loss to others.
The fact the email was not security marked and was allowed to be sent to the wrong people highlights wider issues in the company with incompetence which could lead to litigation
