Reference no: EM133188962

Question: Case Study - Monitoring communications

You work for an organisation selling goods to customers and are responsible for the sales team. You must ensure communications follow legal obligations and organisational requirements. You have been informed that a member of your team has been giving personal information of customers to a friend working for a known competitor. You must address this situation immediately by organising and planning the actions you will need to take.

The information that you will need to consider is:

Data privacy and confidentiality - all customer's information must be kept private and records made in the secure customer database system. Sales staff must not disclose personal information about customers or staff to other customers or third parties. The consequences of this would be noted as criminal activity and result in prosecution.

Organisational requirements - all customer communications must be conducted according to the customer standards document that has been produced by the organisation. This provides information on data protection policy and procedures for customer communications.

Looking at the issue raised, assess the information and identify what actions you will need to take. You need to address the issues and apply your risk management skills. Suggest ways to overcome this issue, the actions that need to take place for the employee, and note any legal or organisational requirements.

1. What are the facts related to the problem?
2. Details of what you would include in an action plan to deal with the situation
3. The appropriate method for communicating with the team
4. The assessment of the risk treatment for appropriateness and ensuring it is lawful and follows organisational requirements.