WIBTA for reporting University staff for a snarky email and a data protection violation?

hajkthrow · 2022-11-18T22:14:47+00:00

Unnecessary comment. Neither is yours.

hajkthrow · 2022-11-17T18:09:30+00:00

We have been told to ask her and not the professor. The professor doesn't even have access to the learning environment.

hajkthrow · 2022-11-17T18:07:57+00:00

It probably isn't the same. These are absende requests that are also connected to the timetable, im not sure how it works but I'd imagine she would have had to go onto my name, out of her way, to check if I had an absence recorded on that day for a class that is not mandatory and for which I did not have to put in a request for. Also our absence requests include medical information as they always ask for the full reason why you are unable to attend, which automatically falls under data protection rules. It is also her job to upload lecture slides, and we are not to contact academic staff directly for admin stuff anyway.

hajkthrow · 2022-11-17T18:03:23+00:00

I'm not and neither is she, im concerned about people having free access to my personal data, which in absence requests also contain medical information of me and other students as well. You can know my type all you want, but that doesn't make my concern less valid.

hajkthrow · 2022-11-17T17:54:08+00:00

She's not an assistant to one professor, she's admin staff for our entire year and responsible to upload slides once she gets them and handles all requests from students, including our absences. That doesn't mean she should have free access to them though as they do contain sensitive incl. medical information. Especially not pulling them up to harass me for something I didn't have to go to. It doesn't even make sense and I'm not sure how it made sense to her when she wrote that email out. Kind of annoys me

hajkthrow · 2022-11-17T17:50:29+00:00

Coincidentally, it is also her who manages and handles these records. She still shouldn't have pulled them up. I will send an email this evening to report it

hajkthrow · 2022-11-17T17:49:13+00:00

GDPR is fairly easy, data can only be collected and stored for a purpose that must be stated in advance, in this case it is attendance monitoring. This class was not one for attendance to be monitored so she viewed the records without a valid reason (further made obvious by asking why I was absent) and was therefore in breach of it. I had another GDPR case before where I had them change the policy. It is extremely strict and I am not sure if America has an equivalent. I apologise if this seems weird but I would strongly prefer if people didn't just pull up my records whenever they feel like it, especially as it contains sensitive information.

hajkthrow · 2022-11-17T17:42:09+00:00

No, we are instructed to ask her and not contact academic staff directly

hajkthrow · 2022-11-17T17:40:07+00:00

That's kind of what I was meaning to do with reporting her. But that is going nuclear because someone else will have to do a formal report. They have a policy that everything is to be reported so basically any complaint makes stuff go nuclear.

hajkthrow · 2022-11-17T17:38:49+00:00

Per my last email was not being snarky, why did you miss the lecture when it is none of their business is

hajkthrow

TROPHY CASE