Thread: PPI Boxes ticked for me

Lloyds manage to lose anything that puts them in the frame. Just got SAR (proper) 361 days after initial request.

My PPI was pre-ticked in 'do you want it?' and 'optional to add it to loan from start'

Have I got a case as they have never sent a policy, I was told proir to this loan that to get a loan I would need to take out PPI. I've always been self-employed and Lloyds have always known this.

Similar Threads:

• PO Boxes YOU TOO CAN HAVE ONE
• Curry's selling empty boxes and not doing anything to help!
• printed ticked box
• PPI - two blank boxes
• can i claim for PPI refund if i ticked the NO box on application?

from another of your PPI threads this is my response

hello Kinc


Quote:
I have got my S.A.R - (Subject access request) but they are saying that certain data needs an extra £10 per data controller. They pointed me at this -

7 Right of access to personal data
(1) Subject to the following provisions of this section and to sections 8 and 9, an individual is entitled—
(a) to be informed by any data controller whether personal data of which that individual is the data subject are being processed by or on behalf of that data controller,
(b) if that is the case, to be given by the data controller a description of—
(i) the personal data of which that individual is the data subject,
(ii) the purposes for which they are being or are to be processed, and
(iii) the recipients or classes of recipients to whom they are or may be disclosed,
(c) to have communicated to him in an intelligible form—
(i) the information constituting any personal data of which that individual is the data subject, and
(ii) any information available to the data controller as to the source of those data, and
(d) where the processing by automatic means of personal data of which that individual is the data subject for the purpose of evaluating matters relating to him such as, for example, his performance at work, his creditworthiness, his reliability or his conduct, has constituted or is likely to constitute the sole basis for any decision significantly affecting him, to be informed by the data controller of the logic involved in that decision-taking.

Are they right, as far as I am aware there is one data control per company?
Kinc are all your links related to PPI?

Data Protection | OUT-LAW.COM


Quote:
it includes the following and much much more
Negotiating with the Data Subject (This should be important to Banks)

At this stage, it is advisable to negotiate with the data subject. The location information the data subject will have already given will give a clue as to what it is the data subject really wants to have information about. The benefit of the Data Protection Act 1998 is that it allows data controllers to negotiate with data subjects to get the data subject to specify the exact information he or she wishes to receive.

The data controller is entitled to ask for a fee of £10 and two further pieces of information. Firstly, the data controller must satisfy himself that the person making the request is, in fact, the data subject. The use of a Subject access request form is advised, since the greatest breach of a data controller's security is for the data controller to satisfy a subject access request made by a person impersonating the data subject. The use of the form goes towards proving that the data controller has adequate identification and verification procedures in place. Secondly, the data controller is entitled to ask the data subject for further information to enable the data controller to locate the information which that person seeks.

When the last of these three pieces of information has been obtained, the forty day period starts to run. It is advisable to put procedures in place to ensure that the receipt of the request and the further information is correctly dated so that an organisation knows how long it has to satisfy the subject access request.

However, if the data subject is adamant that he or she wishes to receive a copy of everything the data controller holds on him or her, then there is very little the data controller can do about this, and a completely exhaustive search of the computerised and manually held data in the organisation will be required. (nice to know what you see in the Act is what you get)