Caught In The Data Act

My call center receives requests from customers for information that is protected under GDPR (General Data Protection Regulation) guidelines.

Caller: “I need information on [account and client].”

Me: “I can’t release that information without proof of identity and the client’s signed consent.”

Caller: “Oh, I can’t send that because of GDPR.”

Me: “You and me both, sister!”

Caller: “Oh… oh! I’m an idiot—” *Click.*