Yes it does include personal data recorded in TEAMs. This is why its important for an organisation to know where data is stored electronically and physically.
Yes – I handled a SAR which included Skype chat records. There was chatter about colleagues which was uncomfortable.
I recommend adjusting the retention policy to 24 hours. People often use chat and IM in ways that they wouldn’t use email and say things they wouldn’t put in email.
HellenB
Yes – which is why training your teams on what is appropriate behaviour in these environments is imperative.
Barry Moult
Yes it does include personal data recorded in TEAMs. This is why its important for an organisation to know where data is stored electronically and physically.
Simon
Yes – I handled a SAR which included Skype chat records. There was chatter about colleagues which was uncomfortable.
I recommend adjusting the retention policy to 24 hours. People often use chat and IM in ways that they wouldn’t use email and say things they wouldn’t put in email.
Figaro
Please refer to https://gdpr-info.eu/art-15-gdpr/
Note that it does not limit it to certain technologies, or types of processing.
If someone’s personal data is processed, that someone is entitled to have access to it, regardless of the platform.
Otherwise, DP folks would start advising businesses to move away from email altogether xD
Dave_Wylie
Absolutely