name them

It was McDonalds. They had collection boxes for Mcdonalds Children’s charity.

No legal repercussions.

I did some consultancy for the NHS (hint for anyone in IT: DON’T) and tried to whistle-blow the absolute shocking state of patient confidentiality. Nurses would routinely look up things to use or for gossip or leverage over people. For example, one nurse was able to access patient details to help her friend get ammunition in a divorce and custody battle. Another used it for playground gossip against a mother who had offended her and spread around that she was on antidepressants. When I started the complaint (giving multiple examples), they closed ranks and decided my claims were due to “miscommunication” and/or were fabricated. I could prove this data had been accessed and who had accessed it on the system’s audit trail. Nothing was done. They have policies in place stating not to do that, but they were routinely ignored.

Same with the police. Officers were using police databases to stalk and harass exes, exes new partners or neighbours who had pissed them off. The Independent Police Complaints Commission are a joke and are staffed by ex police officers who had personal relationships with the people involved. The complaint was closed and I received a letter months later thanking me for withdrawring my complaint. I never withdrew the complaint and was informed that I had and I was unable to open it up again. This was 10 years ago and I haven’t worked for any police department since or relied on the police for anything.

GDPR and data protections laws are all well and good, but without enforcement they are meaningless.

I live in the UK.

The consultancy never claimed that the surveys were anonymous. Pretty much every manager did when they sent it out to their employees. I guess lots of bosses in the UK have no problem with lying to their employees.

Privacy laws are only as good as their enforcement. I’ve seen first hand the slap-dash attitude the NHS has to patient confidentiality and the police using databases for their own personal reasons. I’ve also experienced UK primary schools violating confidentialities. No repercussions for any of them.

Just remembered another one:

Have you ever had an anonymous survey sent to you by your work or by a company your work has hired? They’re not anonymous. Management knows what your opinions are and will use them against you.

I worked for a consultant that would try and help fix businesses. The worst example I can think of was when I saw one person had answered a survey question saying that their employer had a “blame culture”. Rather than trying to work on the processes or address why something had gone wrong, staff would start pointing fingers to keep out of trouble. This didn’t fix anything and only made people spend all the time covering their posteriors.

The manager called a general meeting of everyone at that site and then singled out the employee who’d mentioned the blame culture, blaming him for saying there was a blame culture. The employee then pointed out that they’d been told, in writing, that the survey was anonymous. That employee called the manager a liar and then she lost control of the meeting, with lots of employees calling her a liar and several storming out. They weren’t in business the next year.

Worked at a globally popular fast food francise many years ago. They had collection boxes for a charity that they raised money for. None of the money went to that charity, but was divided between owners and managers.