I recently (and embarrasingly) failed an email phishing test at work when I should have known better. At the time I was distracted and not paying attention properly and it caught me out, which proves it's worth doing and I learned from it!
We're only a small company (30 people). Not may people failed. I have since learned that the person running the tests revealed that I had failed during a board meeting.
I don't find this acceptable. I think it's unprofessional and an invasion of my privacy.
I'm currently ensuring I have up to date copies of our internal policies to see where I stand.
Does anyone have any ideas/information on where I can look into how I should be protected by (say) GDPR and any other standards?
An edit for any future readers. Replies so far seem to think I have an issue with being tested, or the results being discussed. I don't! I'm just suprised that I got named rather than an overall score and data of an anonymised nature being used.