I work in a small office in Scotland and the company main office is in England. Every month, the payslips for everyone is mailed to our office and as I sit closest to the door, I usually handle the mail. A few weeks ago, I made a mistake in handing out the payslips and ended up opening someone's payslip and looking at the figures.
My manager and HR had been giving me lecture about how it is against Data Protection etc and that the company will keep a record of this incident for 6 months.
I don't think this will have any impact on my job, but I am really annoyed at how they are blaming me for a simple mistake when they have taken absolutely no measures in preventing or reducing the chance of this Data Protection issue. For example, the company could have sent the payslip to home address of each person instead of our small office leaving us to sort it out.
What I wanted to know is the legal duty of the company in keeping the payslip information secure, because from the way my manager talked, he made it sound like it is all my fault and not the company at all.
Just to make it clear. The issue according to the company is what I did is against Data Protection Act. And according to Principle 7 of the act, the company has a legal duty to take appropriate measure to ensure security. The company has no policy for protecting the information in the payslips. So when I accidentally open someone's payslip, I break no company policy (because there are none in this case). I wanted to know how much is my fault and how much is the company's fault according the the Data Protection Act.
As I mentioned in one of the comment, it looks more and more like I am trying to get legal advice.