I went to give blood, but bureaucracy arrived first and politely took my place.
The morning carried the seriousness of small civic duty. Fasting breath, punctual arrival, the quiet understanding that one’s body would be briefly borrowed by medicine and returned with a plaster and a sense of responsibility fulfilled. I came prepared to be punctured in the name of diagnostics and progress. What I did not come prepared for was administrative reincarnation.
The referral letter introduced me as another person entirely. Another name sat where mine should have been, comfortable, unquestioned, occupying the space with colonial confidence. The date of birth belonged to someone who had clearly entered the world under a different soundtrack. On paper, I had been replaced. Not violently. Not maliciously. Just efficiently. It was impersonation without intent, erasure without effort. The Empire perfected this method long ago. The paperwork has simply become quieter.
The nurse frowned. The doctor leaned closer, as though proximity might restore truth. Silence followed. Not the cinematic silence of disaster, but the very British silence of institutions realising they have erred and wondering how many apologies will suffice. They apologised. I apologised too, because this country teaches you early that remorse is a shared social contract.
No blood was taken. The needle remained unemployed. My veins were spared, though my professional instincts were not.
Wearing my privacy hat, I found myself less surprised than amused. In boardrooms, we speak reverently of data accuracy, identity assurance, and record integrity. We draft policies thick enough to stun small animals. We conduct workshops, audits, and impact assessments. Yet the system still stumbled over the most elemental question of all. Who is this person?
There is a particular way data fails that never makes headlines. It does not scream. It does not crash. It smiles politely and carries on incorrectly. Had I been distracted, the blood would have been drawn. The vial labelled. The results, processed with clinical confidence. Somewhere else, another human would have been reassured or alarmed by numbers that did not belong to them. Meanwhile, my own body would have been silently ignored. Harm, when it comes, rarely announces itself. It arrives disguised as routine.
What stayed with me was not the mistake, but the response. The clinicians stopped immediately. They checked. They acknowledged the error without defensiveness or jargon. There was no attempt to minimise, no suggestion that the system knew better than the human standing in front of it. Just an honest pause and an insistence on doing no further damage. This is what trust looks like when it is not outsourced to policy.
Corporate culture, unfortunately, teaches a different reflex. When things go wrong, we sanitise language until reality bleeds out of it. We say there is no material impact. We say the issue is contained. We say lessons will be learned, preferably at a later date and by a different team. The human affected becomes a footnote, if acknowledged at all. Regulators, contrary to myth, are not allergic to mistakes. They are allergic to arrogance.
This small incident was a reminder that privacy is not fundamentally about compliance. It is about dignity. It is the stubborn refusal to allow systems to treat identity as a suggestion. A name is not metadata. A date of birth is not decorative. They anchor a person in the machinery of institutions that are very good at abstraction and very bad at remembering flesh.
I left without a blood test but with an education that arrived uninvited. Near misses are generous teachers. They show you how close order and error sit to each other. They reveal how easily efficiency outruns care. They ask uncomfortable questions about what happens when no one notices.
Somewhere, a printer misbehaved or a form was mismatched. No malice was involved. That is precisely why the lesson matters. The most dangerous risks do not wear villainy. They wear normality.
Privacy work is often unpopular because it insists on slowing things down. It asks inconvenient questions when everyone else is celebrating speed. It refuses to be impressed by systems that move quickly but cannot tell one human from another. That morning, the absence of a needle felt like a small mercy. The presence of reflection felt like a necessary one.
I remain myself. The system faltered, corrected, and released me. In a world increasingly run by paperwork and certainty, that modest outcome is not trivial at all.
Michael Irene, CIPM, CIPP(E) certification, is a data and information governance practitioner based in London, United Kingdom. He is also a Fellow of Higher Education Academy, UK, and can be reached via moshoke@yahoo.com; twitter: @moshoke
