64 Percent of UK Employees Admit to Forwarding Work Emails, in Violation of GDPR
British technology services provider Probrand said it surveyed 1,002 full- or part-time U.K. employees, 64 percent of whom fessed up to forwarding a customer email to their personal accounts in the four months following the introduction of GDPR in May 2018.
January 04, 2019 at 02:23 PM
3 minute read
More than a majority of United Kingdom employees recently surveyed admitted to violating the General Data Protection Regulation (GDPR) shortly after it went into effect in May 2018 by forwarding a customer email to their personal accounts.
British technology services provider Probrand said it surveyed 1,002 full- or part-time U.K. employees, 64 percent of whom fessed up to committing the breach in the four months following introduction of GDPR.
In addition, 84 percent of those who admitted to forwarding the customer emails said there was no malicious intent behind their actions and thus they did not feel that they were doing anything wrong. Unfortunately, this is likely no defense to an alleged GDPR breach and the nightmares it may cause, said Matt Royle, marketing director at Probrand.
“What may seem like an innocent and even helpful action of workers trying to catch up on work out of hours is actually a clear breach of GDPR laws,” he said in a statement. But “seemingly innocent actions could have substantial repercussions. A GDPR breach can result in fines that potentially run into the millions. This financial impact along with the knock on effects this can have for businesses, including reputational damage, the loss of customer loyalty and trust, can be hugely damaging for companies in the long term.”
Although “worrying,” the results are not necessarily surprising, Royle said, given that earlier research from Probrand found that 55 percent of all U.K.-based businesses were breaching GDPR laws by not having an official process or protocol for disposing of obsolete IT equipment.
The results may be even more troubling to companies in light of the fact that data from the U.K.'s Information Commissioner's Office (ICO) revealed that the number of reported whistleblower complaints about potential data breaches at businesses have increased 165 percent since last May. The European Union's expansive regulation imposes new rules on any entity that offers goods and services to people in the European Union or that collects, processes or stores data tied to EU citizens.
“Given the amount of publicity around GDPR it is perhaps surprising that more workers (and employers) are not aware of the basics of what is required for GDPR compliance,” Royle said. “It is clear from these findings that businesses need to do more to educate their employees on the laws surrounding GDPR and data protection.”
In November, it was revealed that a Portuguese hospital was seemingly the first business to be hit with a monetary penalty under the GDPR, after it was fined 400,00 euros—about $453,000—by the country's data protection supervisory authority for allowing too many users to have access to patient data in the hospital's patient management system.
The hospital, Central Hospital of Barreiro Montijo, is appealing the decision, and may initiate legal proceedings, it said at the time.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllGlobal Software Firm Trying to Jump-Start Growth Hands CLO Post to 3-Time Legal Chief
Meta Workers Aren't of One Mind on Company's Retreat From DEI, Fact-Checking
Ad Agency Legal Chief Scores $12M Golden Parachute in $13B Sale to Rival
3 minute readTrending Stories
- 1Chief Judge Joins Panel Exploring Causes for Public's Eroding Faith in NY Legal System
- 2Pogo Stick Maker Wants Financing Company to Pay $20M After Bailing Out Client
- 3Goldman Sachs Secures Dismissal of Celebrity Manager's Lawsuit Over Failed Deal
- 4Trump Moves to Withdraw Applications to Halt Now-Completed Sentencing
- 5Trump's RTO Mandate May Have Some Gov't Lawyers Polishing Their Resumes
Who Got The Work
J. Brugh Lower of Gibbons has entered an appearance for industrial equipment supplier Devco Corporation in a pending trademark infringement lawsuit. The suit, accusing the defendant of selling knock-off Graco products, was filed Dec. 18 in New Jersey District Court by Rivkin Radler on behalf of Graco Inc. and Graco Minnesota. The case, assigned to U.S. District Judge Zahid N. Quraishi, is 3:24-cv-11294, Graco Inc. et al v. Devco Corporation.
Who Got The Work
Rebecca Maller-Stein and Kent A. Yalowitz of Arnold & Porter Kaye Scholer have entered their appearances for Hanaco Venture Capital and its executives, Lior Prosor and David Frankel, in a pending securities lawsuit. The action, filed on Dec. 24 in New York Southern District Court by Zell, Aron & Co. on behalf of Goldeneye Advisors, accuses the defendants of negligently and fraudulently managing the plaintiff's $1 million investment. The case, assigned to U.S. District Judge Vernon S. Broderick, is 1:24-cv-09918, Goldeneye Advisors, LLC v. Hanaco Venture Capital, Ltd. et al.
Who Got The Work
Attorneys from A&O Shearman has stepped in as defense counsel for Toronto-Dominion Bank and other defendants in a pending securities class action. The suit, filed Dec. 11 in New York Southern District Court by Bleichmar Fonti & Auld, accuses the defendants of concealing the bank's 'pervasive' deficiencies in regards to its compliance with the Bank Secrecy Act and the quality of its anti-money laundering controls. The case, assigned to U.S. District Judge Arun Subramanian, is 1:24-cv-09445, Gonzalez v. The Toronto-Dominion Bank et al.
Who Got The Work
Crown Castle International, a Pennsylvania company providing shared communications infrastructure, has turned to Luke D. Wolf of Gordon Rees Scully Mansukhani to fend off a pending breach-of-contract lawsuit. The court action, filed Nov. 25 in Michigan Eastern District Court by Hooper Hathaway PC on behalf of The Town Residences LLC, accuses Crown Castle of failing to transfer approximately $30,000 in utility payments from T-Mobile in breach of a roof-top lease and assignment agreement. The case, assigned to U.S. District Judge Susan K. Declercq, is 2:24-cv-13131, The Town Residences LLC v. T-Mobile US, Inc. et al.
Who Got The Work
Wilfred P. Coronato and Daniel M. Schwartz of McCarter & English have stepped in as defense counsel to Electrolux Home Products Inc. in a pending product liability lawsuit. The court action, filed Nov. 26 in New York Eastern District Court by Poulos Lopiccolo PC and Nagel Rice LLP on behalf of David Stern, alleges that the defendant's refrigerators’ drawers and shelving repeatedly break and fall apart within months after purchase. The case, assigned to U.S. District Judge Joan M. Azrack, is 2:24-cv-08204, Stern v. Electrolux Home Products, Inc.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250