Data Protection violation? What should I do?

[killahwhale]

Hey there,

I used to play at a well known online Casino whom I have a few acquaiences that work at. I Self Excluded from that Casino after spending a large amount of money because of frustration. One aquaitence a few months back tweeted me publicly about it. The thing is, this was a few months ago and now only after family having seen it and raised it with me have I realised how damaging this was for me as an individual - not alone violating data protection rules!

The main thing is, I don't want to get this person fired but at the same time, I just don't know what to do.

Here's the tweet - What would you do?

 

[incrediblestuff]

That is very unprofessional.
I don't know anything about twitter as i don't use it but maybe you can get that retracted by contacting an admin or support?

 

[killahwhale]

That is very unprofessional.
I don't know anything about twitter as i don't use it but maybe you can get that retracted by contacting an admin or support?

It was erased however it was spotted by family who have saved it (as did I at the time) and now are concerned about 'gambling issues'. The tweet was from a personal account and they have erased it now but the damage it done.

 

[incrediblestuff]

I see your point but other then a lawsuit which seems a tad unlikely it is as you say "damage done".

 

[killahwhale]

I see your point but other then a lawsuit which seems a tad unlikely it is as you say "damage done".

It is but I feel it important that this individual is lectured (hard core indoctrination type lecture) about Data Protection and the law.

 

[incrediblestuff]

Perhaps one of "our" legal counselors have some more useful info for you then, I am no legal buff whatsoever, but i do think you would have a case here.

 

[killahwhale]

I really don't think I have a case except against the individual and even then, all I'd win would be an apology! Haha

All I want really is for him to realise how important Data Protection is and why the law is there; I'd honestly hate to lose someone their job. I'll happily accept any advice though

 

[Nifty29]

I really don't think I have a case except against the individual and even then, all I'd win would be an apology! Haha

All I want really is for him to realise how important Data Protection is and why the law is there; I'd honestly hate to lose someone their job. I'll happily accept any advice though

Well I'm sure the backyard lawyers will tell you all sorts of rot about this law and that law, but you should ignore all of them and get professional legal advice if this means a lot to you.

The person involved isn't a friend, just an acquaintance, and I personally would have no compunction firing off a complaint to their boss and having them roasted. If they don't take you seriously, then you should name and shame the casino involved and tell your story to everyone you can.

IMO it is appalling behaviour and there is no place for it, especially when it involves sensitive information such as finances and gambling habits.

You might even contact Twitter and see what they can do.

 

[zebedy]

You could try complaining to the manager but omitting the name of this person explaining you don't think they were intentionally trying to hurt you but your worried about your personnel information.
It depends on who has access to this information as to whether the manager will know who you are talking about.

I doubt you could do much more if you don't want your friend fired as most respectable companies take this issue seriously.

 

[dunover]

As Nifty says, this thread will invite all sorts of barrack-room lawyers, but one thing I will say with certainty and from knowledge of a similar and less damagesome case is that the person concerned (IF you identify them) WILL be dismissed for gross misconduct for breach of confidentiality, and it would be an easy compo claim via a civil case. Your move really.

 

[Mousey]

I've gotten lost.... not unusual for me... Did the 'acquaintance' who blabbed on Twitter work for the casino? If so, he should be fired (for the protection of all players). Complain to the casino.

If this was merely someone you worked with, chew him out and learn to keep your mouth shut about personal and financial matters when speaking with acquaintances.

 

[just play]

I've gotten lost.... not unusual for me... Did the 'acquaintance' who blabbed on Twitter work for the casino? If so, he should be fired (for the protection of all players). Complain to the casino.

If this was merely someone you worked with, chew him out and learn to keep your mouth shut about personal and financial matters when speaking with acquaintances.

I'm lost too. lol.

It has to be someone who works for a casino, because it says "I saw your account". How could an acquaintance see his account? Unless he gave this acquaintance his account info? (which I find unlikely)

I agree, if this person works for a casino, he should be fired!

On Twitter you can "pm" a person, it's called "direct message", not sure why he didn't use that function? I don't do Facebook because of things like this, you have no idea what someone else is going to do...I use Twitter, but under a made up name.

 

[Richas]

I really don't think I have a case except against the individual and even then, all I'd win would be an apology! Haha

All I want really is for him to realise how important Data Protection is and why the law is there; I'd honestly hate to lose someone their job. I'll happily accept any advice though

I think you do have a case. Their employee has caused you harm/embarrassment. Legally you need to show some harm as well as distress though to get court ordered compensation.

The place to look at re the law is the Information Commissioner's Office here:

You do not have permission to view link Log in or register now.

For me this is "sensitive data" under the act, it is essentially health data as it implies addiction (e)

Sensitive personal data.

In this Act “sensitive personal data” means personal data consisting of information as to—
(a)the racial or ethnic origin of the data subject,
(b)his political opinions,
(c)his religious beliefs or other beliefs of a similar nature,
(d)whether he is a member of a trade union (within the meaning of the M1Trade Union and Labour Relations (Consolidation) Act 1992),
(e)his physical or mental health or condition,
(f)his sexual life,
(g)the commission or alleged commission by him of any offence, or
(h)any proceedings for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings.

The firm should really compensate you. Why not ask for a % of your losses?

As for the tweeter getting in to trouble - he deserves it!

 

[killahwhale]

Hey guys, thanks for the replies and ill certainly look into it.

Just for the sake of clarity, the person who did it works at a Casino, knew I played with their Casino as I had mentioned it in conversation and then, without need, looked through my account.

 

[threescatters]

That is absolutely terrible and you should take legal action OP. Which casino was it?

 

[killahwhale]

It was BetVictor.

 

[Mousey]

Hey guys, thanks for the replies and ill certainly look into it.

Just for the sake of clarity, the person who did it works at a Casino, knew I played with their Casino as I had mentioned it in conversation and then, without need, looked through my account.

Well, that person should well be aware of guidelines concerning player data security and privacy. Sheesh... Anyone play at BetVictor? Makes you feel real confidant in the safety/security of your personal info doesn't it?

slight derail:

And casinos just don't understand why players don't like to send 10 copies of ID, passports, bank statements, credit card scans, blood samples, and first born children, via unsecure methods, to whoever unknown person might be on the receiving end at the casino.

/derail

 

[killahwhale]

I agree; it really does raise some trust issues. I didn't even tell the person my username and they still found my account (which I'm sure is easy to do by name or email).

I just don't know how to handle this situation

 

[just play]

I agree; it really does raise some trust issues. I didn't even tell the person my username and they still found my account (which I'm sure is easy to do by name or email).

I just don't know how to handle this situation

I'm thinking you are friendly with him and don't want to get him in trouble correct?

Maybe he also was thinking you were friendly and didn't do this maliciously in his mind, he was just posting to a friend?

I wouldn't know how to handle this situation either if I were you. (if you are friendly with each other, that puts a lot of strain on you)

Go with your gut, what does your gut say?

 

[dunover]

It's devil and deep blue sea I'm afraid. To get redress, you need to supply information. This means exposing the leak. If you do that he/she WILL be fired, instantly, without compensation, whether you plead their case or not. You can't, unfortunately, get the compensation/redress you deserve based on your tale without serious consequences for the employee. Like I said, I saw a man at a telecoms company get reported for finding someone's new address (on his behalf not for a third party) and this was BEFORE the DPA back in the 1990's. He was escorted from the building within 30 minutes of the customer calling in and complaining, the seat of his trousers still smoking.

 

[killahwhale]

We're not friendly per se, it's just that I know him and is hate to ruin someone's livelihood.

I'm not looking for compensation but I am looking for him to be disciplined. I know they can't share what they'd so with me but I might ask BetVictor if someone higher up the chain could phone me about this.

 

[Slotster!]

Difficult situation. I guess it depends on any prior conversations with this guy and how the situation was framed with him. It's likely you had a conversation along the lines of "I don't play with you guys anymore because I lost a stack etc etc" I can't imagine why this chap would communicate this to you without prior interaction on the subject. Maybe he was just being sympathetic - it's vague enough...

Personally I'd chalk it up to experience and move on.

 

[killahwhale]

He had no idea I had self excluded all he knew was that I had played Roulette at BetVictor.

He's an acquaintance of mine; not a friend.

He hunted down my account and posted a public tweet. He needs training on Data protection.

 

[P.V.]

He had no idea I had self excluded all he knew was that I had played Roulette at BetVictor.

He's an acquaintance of mine; not a friend.

He hunted down my account and posted a public tweet. He needs training on Data protection.

He should be reported to the casino IMO.

 

[same_old]

Hi P.V,

This may sound bad but could you possibly tell a small lie to your family member, say it was spam or something to that affect?

As for the casino side of things unfortunately the damage has been done but I would still go ahead and put in a formal complaint about it to the managers of the casino, but as you stated you do not wan't this person to get fired, if that's the case you really don't have any other option than to let it go.