Data Protection Act request returned

[bigshel]

My son had asked for records of 3 bank accounts. He has received a letter stating that the accounts cannot be traced due to lack of information even though he stated the account numbers and the name / address of his local branch in his initial template letter.He is now being asked to provide dates when the accounts were opened and closed and also the sort code for his branch. His cheque has also been returned with his initial letter.

He will send the letter again, including the extra infromation. Should he update the date on his letter? As the cheque has been returned can he state that the 40 days are from them receiving his first Data Protection Act request or will it start from the date of his new request? I feel these are delaying tactics being used as I am quite sure that his initial details should have been adequate!

Can anyone advise please?

[Bigmac versus]

Hi bigshel yes this could have been found and looks like a delaying tactic, if they were to say for security reasons can you provide us with more information that would have been more plausable.
Provide them with the information they have requested and may i ask if he is at the same address, if he isnt he would be best to send some id in with the request so as to avoid them asking for it thus delaying again.
You could hand in the Subject Access Request to the local branch therefore if there is any other information they require you would know there and then.

[T4FF]

If I'm correct, the Subject Access Request deadlines started from the day they first received your request. This further request is most likely delaying tactics.

The Data Protection Act request is a request for information on AN INDIVIDUAL and the bank are therefore required to be able to locate that individual even if you don't have account numbers.

It is important for him to identify himself so I agree with bigmac regarding the extra information though I would put in the letter somewhere the bit about an individual and that you have provided them with enough information to do this so you expect no further requests from them.

Good luck