Risks of using personal email accounts for business

The risk of using personal email accounts for business

Following recent revelations that Mr Hancock had an affair with his aide, Gina Coladangelo, he – along with some other senior officials at The Department for Health and Social Care (DHSC), now face accusations of using their private email accounts to conduct government affairs during the Covid-19 pandemic.

While the use of a private email account does not in itself break data protection laws, Elizabeth Denham, the information commissioner, was concerned that information in private email accounts is being overlooked, auto deleted or otherwise not made available.  A formal investigation into the DHSC is now underway.


You might be thinking, but what has this got to do with my business?

While there are key elements to this that can be explored by looking at ministerial guidelines, there are important aspects to highlight from an employment / data protection viewpoint.  Our employment experts have summarised the impact a private email account can have when you receive a Data Subject Access Request (DSAR) in the two following scenarios:

You receive a DSAR – you do not allow your employees to conduct business via private email accounts

The ICO does not expect employers to instruct employees to search their private email accounts in response to a DSAR, unless that employer has a good reason to believe they are holding relevant personal data.

You receive a DSAR – you allow your employees to conduct business via private email accounts

Depending of course on what personal information the individual has requested, in this context, the employees may be processing that data on your behalf, in which case it may then be within the scope of a DSAR you receive.

Private email accounts can therefore fall within the scope of responding to a Data Subject Access Request – meaning that you may need to instruct your employees to search their private emails in order to comply with the request.

 

Speak to an expert

Need help navigating data protection and employment law issues? Whatever your situation Primed can help – Primed Premium gives you unlimited telephone and email advice from our employment & HR experts for an affordable monthly fee whilst Primed gives you access to extensive online resources and template documents to help you manage your team.