Data Breach

September 2021 - Customer data shared as GreenSquareAccord demonstrate their inability to provide a core service and protect their residents data.

Instead of publishing a newsletter to all the residents of Maureen Christian House GreenSquareAccord sent a letter to every flat. A simple enough task.

The easiest approach would have been to have published the newsletter, updating all the residents of Maureen Christian House as to what was happening regarding the outstanding issues currently affecting their quality of life.

For whatever reason this wasn’t possible.

Either way as the residents were no longer going to have their window and doors replaced before the end of summer (as agreed) the bin stores would still remain unfixed, the vent in the ceiling would still remain open during thunderstorms, and smoke alarms would continue to be set off.

A simply brilliant landlord would have perhaps published a newsletter with an apology, an explanation as to why there would be yet further delays, and dare one suggest - publish a revised timeframe.

GreenSquareAccord instead sent the following:

What’s wrong with this you wonder. In theory nothing. Page one was clearly addressed to the correct person at their address. The reverse side however was the same letter but with the name and address of the neighbour.

This might not sound like a big issues, however GreenSquareAccord have just given out the name of everyones neighbour (this happened across all flats). Residents may not want to share their name with their neighbour. Not all neighbours will have a cordial relationship.

This also raises a bigger questions. If GreenSquareAccord are unable to protect resident data at this level what chance do they have throughout the rest of their organisation. They have failed again to provide the lowest level of basic care.

An email was sent and ignored so now in accordance with the ICO GreenSquareAccord have one calendar month to respond, restore faith, and rectify yet another issue…

Update - 19th October 202

Unfortunately having been ignored this matter has now been escalated to the ICO. Another clear example of GreenSquareAccord ignoring their residents, failing at their core level, and putting residents as risk by exposing their data.

Fair warning was given in writing:

Sophie Atkinson

GreenSquare

Methuen Park

Chippenham

Wiltshire

SN14 0GU

21st Septmener 2021

Dear Sophie Atkinson

I am a resident of Maureen Christian House, Desborough Crescent, Oxford, OX4 4GW.  I wish to raise an issue with you regarding a recent Data Protection breach, I have previously informed you and your office of this via email on 10th September followed again on the 15th September.

I am concerned that you have not handled my personal information properly.

As stated in my previous emails; on the 3rd September GreenSquareAccord wrote to all residents of Maureen Christian House informing them that there wouldn’t be a September newsletter.  On the reverse side was a duplicate of page one, including the name and address of our neighbour. This was replicated to all neighbours.  I believe this to be a breach of data protection guidelines and a clear example of a lack of due diligence.  

I understand that before reporting my concern to the Information Commissioner’s Office (ICO) I should give you the chance to deal with address this issue.

If, when I receive your response, I would still like to report my concern to the ICO, I will give them a copy of it to consider.

You can find guidance on your obligations under information rights legislation on the ICO’s website (www.ico.org.uk) as well as information on their regulatory powers and the action they can take.

Please send a full response within one calendar month of this issue being reported to you on 10th September. If you cannot respond within that timescale, please tell me when you will be able to respond.

If there is anything you would like to discuss, please contact me on the following number 07856748346

Yours sincerely 

The only response that was provided by GreenSquareAccord was an automated one:

On 21 Sep 2021, at 12:23, GreenSquareAccord Customer Services <info@greensquareaccord.co.uk> wrote:

Thank you for your email

Your enquiry has reached our Customer Service Team. We will aim to respond within two working days to let you know what will happen next.

If you have an emergency, please call 0300 111 7000

Kind regards
Customer Services

Updates to follow…