They are still bound to confidentiality by the terms of their employment contract. Even though a verbal discussion would not necessarily be seen as data. But if it us input into the system it would become data. You have control of what information you offer, so it’s quite simple. If you aren’t willing to offer specific information don’t do so.However they are asking the questions and if you give them the answers regarding your medical condition how would the Data protection Act work? You volunteered the answers.
In most other interactions with business it’s the customer who offers the information. We do it day in day out. That’s where the real risk of things like identity fraud or scams occur.
Last edited: