Lesson 7.6 of 10Module progress: 8 of 14

Lesson 7.6

Customer, Employee & Business Information Is Not Casual Conversation

Estimated time: 8 minutes

Information is also a workplace asset.

An employee may see:

  • names
  • phone numbers
  • addresses
  • identification documents
  • payment information
  • customer orders
  • employee records
  • salaries
  • disciplinary information
  • passwords
  • student or parent information
  • internal business records
  • supplier information

Access to information does not automatically create permission to share it.

Nigeria’s Data Protection Act establishes obligations around fair, lawful and transparent handling of personal data and appropriate protection against unauthorized access, loss or damage.

Scenario

A celebrity, community leader or well-known person visits the business.

An employee sees the customer’s phone number in the system.

Later, she sends it to her friend:

“See who came to our office today!”

The number was available because of work.

It was not provided for entertainment.

Another Scenario

An employee takes a photograph of the day’s customer list to remember something later.

The photograph remains in the employee’s personal photo library and automatically uploads to a personal cloud account.

Information can leave the workplace without anyone intending to “steal data.”

Ask Before Sharing

Before sharing workplace information, ask:

  • Do I need this information for my job?
  • Does this person need it for theirs?
  • Am I authorized to send it?
  • Am I using an approved channel?
  • Am I exposing information that is not necessary?

Important

TrueConduct is not a substitute for formal data-protection compliance training.

Organizations handling personal data should establish policies appropriate to Nigerian law and their particular activities.

More Workplace Examples

Salary information

An employee sees a colleague’s pay while processing an authorized work record.

BETTER RESPONSE

Access for work is not permission to share that colleague’s salary casually.

This is about protecting another person’s records, not a blanket rule against discussing your own pay or raising legitimate concerns.

Customer phone numbers

A friend asks an employee for a customer’s number from the booking system.

BETTER RESPONSE

Do not share it for a personal purpose. Use only the authorized contact or message process if there is a legitimate work reason.

Student information

A school staff member is asked about a student’s private circumstances by an unrelated parent.

BETTER RESPONSE

Do not discuss the student’s record. Refer any legitimate inquiry to the authorized staff member through the approved process.

Pricing strategy

An employee sees an internal plan for future prices and a supplier asks for a copy.

Do not assume that a business contact is entitled to internal strategy.

BETTER RESPONSE

Check authorization before sharing.

Disciplinary information

An employee learns of a coworker’s disciplinary meeting through their work duties.

BETTER RESPONSE

Keep it within the authorized process.

Legitimate reporting or seeking appropriate support is different from entertaining colleagues with private details.

Remember

Being able to see information does not mean you are free to share it.