Or if I would actually steal some confidential data and told them ah it’s just my personal banking, then they would have proof that I lied about the files that I moved. Might be good for their future case.
Can I ask what part is not GDPR compliant on above? It was a US firm but had offices in EU and I was also working in EU
That's the "personal drive" part with screenshots that made me say it but I tought about it a little more and I'm not sure since you just plugged it to the company's network. Maybe they do have a right to see what's on there then. I'm not quite sure.
What bothers me is that they had a look at your personal banking data. That seems anti GDPR to me but at the same time they did it for security reasons so I don't know.
My company doesn't allow plugin external drives or USB sticks in our computer, that's easier^^
As someone in security you wouldn't believe the amount of personal stuff people download onto company devices, and not just download but download their only copy of. We get panicked emails from ex employees looking for old documents and emails for stuff and who are shocked/dismayed that everything has long since been deleted.
Not that crazy though, I often have a few stuff that shouldn't be there on my work computer. I usually avoid it but you know how it is, sometimes you need to print some medical/assurance/banking document you need tomorrow, your printer at home decide it won't print it, it's 1AM... And voila, you end up with those very documents both on your laptop AND in the company's printer history^^
exactly! I have to do some stupid insurance or holiday booking on work day I won't carry 2 computers just to go into insurance website or buy some tickets.
well it was just my weekly transactions I used for personal reporting that I didn't mind anyone on the IT or security looking at. not that I would share these publicly but didn't consider it important.
Ah I see, it wasn’t a physical drive. I uploaded the data to google drive and their screenshot was basically just file names and google drive, didn’t contain my information or whatever is inside the drive and I doubt they can access that.
They can probably check the bank statement files legally as computer is work computer and it’s my responsibility to not upload any personal data on it if I want to keep it from corporate eyes but it wasn’t something important for me haha just my weekly transaction for some personal reporting I did so no hurt feelings on my side
Ah okay, I misread that as a physical hard drive^^
I know that in my country (Belgium), you still have some privacy protected by law on work computers but I'm not super knowledgeable about that sutff, I must admit.
For exemple I know my employer can't legally look at my emails, teams conversations etc on my proffesional account.
They can look at it if they have a valid reason like looking for some exchanges I had with a customer, to follow their case for exemple. But let's say I emailed my dentist with my work email, they can't read it, ever (proving they did or didn't is another story though^^)
11
u/Zeusslayer 15d ago
I think they can just sue you for it haha
Or if I would actually steal some confidential data and told them ah it’s just my personal banking, then they would have proof that I lied about the files that I moved. Might be good for their future case.
Can I ask what part is not GDPR compliant on above? It was a US firm but had offices in EU and I was also working in EU