Thread: Egg have failed to comply with s.10 and s.7 of the DPA... What next?

Hi,

I wrote to Egg on the 15th September and gave them notice under S.10 of the data protection act to cease processing any data in relation to this account. It’s been 21 days and I have not heard anything from them.

I got a letter template from this site which said...

Please note: you may also consider this letter as statutory notice under section 10 of the Data Protection Act 1998 to cease processing, with immediate effect, any data in relation to this account, both within your own internal records and records with any third party, including any credit reference agencies, which may cause substantial damage or substantial distress to me or to another.

Should you not comply, you must within 21 days, provide me with a detailed Breakdown of your reasons behind continuing to process my data. Should you not respond within 21 days I expect that this means you agree to cease processing all such data. Pursuant to the above, I reserve the right to report your actions to any relevant regulatory authorities I see fit.

They have not given me a detailed break down of their reasons behind continuing to process my data and as far as I can tell have not stopped processing it.

Where do I go from here?

Also they will soon have failed to comply with s.7 of the DPA. I requested a copy of all data held on be and enclosed a postal order for £10. What happens when/if they don’t action this too...

Thanks!

re s7 you might find that you have to wait a bit longer. I know that's the statutory limit, but they dont very often meet it - basically they take their time. I would send them a reminder letter if I were you.
Re s10, you can remind them about this as well, but you will be doing well to actually stop them. These guys, you should never forget, are above the law (well they think they are).
Focus on your s7 request - that is where the gold might be in the form of a defective agreement (or no agreement)