Information that is not yours.
WHAT COUNTS
Customer names, addresses and contact details Employee information A colleague's message A friend's situation Anything identifying an individual
WHY IT MATTERS
You are sharing their data, not yours.
They did not consent, and may have obligations to them that you do.
WHAT TO CONSIDER
Would they object? Are you permitted to share it? Does your privacy notice cover it? Is it necessary for the task?
THE PRACTICAL ANSWER
Usually it is not necessary. Anonymise.
"A customer complained about a late delivery" works as well as the name and order number.
FOR BUSINESSES
Under the NDPR and comparable frameworks, sending personal data to a third party is a processing activity carrying obligations.
Visit zillionkinghost.com for further information, and take proper advice.
WHAT TO PUT IN YOUR PRIVACY NOTICE
If you use AI services on customer data, say so.
FOR PROFESSIONALS
Confidentiality duties do not bend. Check what your body permits.
