Question about data protection

[Guest]

I left my old job to get a new one, on my last day my lan account was disabled and i was told that it would get deleted, i used to have my work emails auto forwarded by a rule to my gmail account, when i left, that forwarding stopped, until yesterday when it started again, meaning my lan account had been reactivated,my lan account had quite alot of rights (open anyones email in the company, domain addition/removal/RAS configuration, not to mention i had 4 years worth of emails.

What can i do to make sure that the old company delete my old account and get rid of my emails, they had personal stuff in, i really dont want any old dick or harry looking at them, i suspect as my lan account had lots of rights then other people within the support department are using it as their own rights may be lower than the ones afforded to them by using my account.....

where do i stand......

 

[Sparx]

your company needs to keep any records of you for at least 8 years, in some cases 25

Not sure how this effects your emails etc

 

[yaruar]

I left my old job to get a new one, on my last day my lan account was disabled and i was told that it would get deleted, i used to have my work emails auto forwarded by a rule to my gmail account, when i left, that forwarding stopped, until yesterday when it started again, meaning my lan account had been reactivated,my lan account had quite alot of rights (open anyones email in the company, domain addition/removal/RAS configuration, not to mention i had 4 years worth of emails.

What can i do to make sure that the old company delete my old account and get rid of my emails, they had personal stuff in, i really dont want any old dick or harry looking at them, i suspect as my lan account had lots of rights then other people within the support department are using it as their own rights may be lower than the ones afforded to them by using my account.....

where do i stand......

A lot of it will depend on what you signed in terms of your contract and any computer use/monitoring stuff which was in there.

 

[Guest]

i worked on a client site using their lan, how does that work...........

 

[Draylor]

This is one of those trick questions: isnt it ...

where do i stand......

In Leeds.

 

[Clown]

... On the other side of the road.

 

[Insane]

i used to have my work emails auto forwarded by a rule to my gmail account

Which co-incidentally should of been taken off prior to you leaving the company, I know where I work its explicitly stated in the email policy guidelines that no auto-forwarding of messages are allowed. Except if you really fancy a bit of disiplinary action (ooh err misses )

when i left, that forwarding stopped, until yesterday when it started again, meaning my lan account had been reactivated

Which might have came as a decision from your line manager or manager of the department to re-activate your account for some reason, We do much the same on exceptional circumstances. (see below)

What can i do to make sure that the old company delete my old account and get rid of my emails, they had personal stuff in, i really dont want any old dick or harry looking at them

Not a hell of a lot, in reality you should of done account tidy-up prior to leaving so there wasnt anything personal left in your mailbox. most companies have a document retention (which extends to emails) for approx 5+ years. Normal action here is to archive the mailbox to a PST file then delete the mailbox from the server (to save us precious megs of space)

I normally have to re-activate accounts from people who have left the company by request of their line managers, mostly due to failing to contact the appropriate external companies to notify them to send relevant information to their line manager or their replacements.

Worst Case Scenario? They discover your auto-forward rule and send a crack legal team after your ass for unauthorised access of company information

Best course of action is to contact the technical support team for your old company and make them aware of the situation ASAP.

 

[evzy]

I think they can do whatever the fuck they want with your emails etc - if you used the companies PC and servers etc the rights are with them - email abuse policies etc..... Better not have had any granny n goat pr0n on there!!

 

[Gray]

Ah! Data Protection! You reminded me of a question i wanted to ask a few weeks ago but it completely slipped my mind.

Right. So one day im at work and i took a call from a customer who wanted to change her details from her name into a friends name because she was leaving the country for a few month.

Now, the work policy that we have in place is that we can change things like address, tariffs etc from a third party TRUSTING they can complete the data protection/questions on the account. The customer was fine with this.

I then told her we cant change the name of the account holder, so it would always be under her own name which she had when she took out the account. She enquired about direct debit and changing the account details into her friends name.

I advised we would have to talk to HER and her friend at the SAME time if she is changing it into a third party account. Customer was a bit up in the air about that due to distance things, but that at one point was company policy [And i recalled getting a slapped wrist for asking a question about it some year prior].

Anyway, my team coach was at the time doing a call observation on that specific call and afterwards i was told i got marked down for giving the customer misinformation on the setting up of the direct debit on the account. Which threw me a little bit because of the past history i have had in asking this question.

And i was told "as long as the third party confirms data proection on the account they can do ANYTHING to the account, apart from request disconnection". Needless to say i dismissed that and i proceeded to ask several other people - Who all backed me up on the process saying i was right.

So in essence, i was told its okay for a third party to call and change anything without the authorisation of the account holder. It was like "well what if a rogue family member or wife/husband called to fuck around wth the account?"

 

[Tom]

If I found out a company I use had allowed other people to change things without my express permission, I would be a bit annoyed. Well, actually, a lot more than a bit.

 

[Krazeh]

Ah! Data Protection! You reminded me of a question i wanted to ask a few weeks ago but it completely slipped my mind.

*snip* stuff *snip*

Not really a data protection issue, it's more of a company policy thing. All the Data Protection Act requires is that organisation put in place appropriate security measures to prevent unauthorised processing or accidental damage or loss of personal data.

If O2 feel it's security measures are appropriate and can show justification for why that's the case then it's down to them what they let third parties do if they successfully pass the security checks.

 

[tris-]

gray - i think its more to do with contracts (right of third parties) act 1999.

id try and help more, but i cant be assed