GDPR - Case Study # 1

Hi Folks, I've decided to publish sample case studies on GDPR. Looking at the interest from public I will give more insights (whatever I've got :-)) Here goes the first case study: -

A traveler from India, Saurabh Patel, lands in Heathrow airport for a two weeks vacation in London. In the Heathrow airport he buys a lottery ticket that has first prize money of 1 Million GBP. After a couple of days in the lottery draw Saurabh is lucky and wins the first prize of 1 Million GBP.

Shortly he is approached by the Royal Wales Bank requesting to invest the winning money into them. When the Indian enquiries how did they get his information, the bank contact tells him that the lottery promoter shared the same with them.

Saurabh becomes curious and asks how did the lottery promoter share his details. Bank tells, since you are not living in EU, Data Privacy doesn’t apply and thereby it is legal to share your data. How should Saurabh respond now?

Disclaimer: Any resemblance to living legal & natural entities in my case study is purely accidental.