I have three accounts, one active and two rarely used. One was "Frozen" due to inactivity. I received a letter telling me to go to the branch to un freeze it. Long story short I had a right barny because the rep wanted to photocopy my Passport and send it to "central office". Insisting the photocopy would not be kept on a database that was her first lie. During the conversation it was insisted a drivers license (or utility bill) and a Passport or something with my photo on were required. Her claim was that after a year of inactivity accounts are frozen for security reasons. That was her second lie. At this point you need to know I've been going to this branch bank for the past 20 years. During the conv the rep insisted details were not on file and need to be updated, yet it emerged when cross questioned that my address name and other details were clearly listed under my active account. My other dormant account containing more funds, had been dormant for over four years, and not been frozen. This insistance on freezing for security reasons was disturbing, as if there was no activity why should there be cause for suspicious activity or any other security risk? The cream in this cake is when I "UN-froze" the account over the telephone. No passport, no drivers license required. However the mass of information they gave me over the phone (Yes... they gave it to me) when unfreezing the account was information mostly forgotton from around 2001, and it's now 2018! The telephone representitive must have been on commission. He created a telephone banking account and input old data about me taking over fifty minutes using existing data to confirm everything from my date of birth to my Limited Company details from the turn of the century; pausing for over a minute between each batch of info confirmed. I believe he was entering my personal data into a credit database for verification, something I've never needed, desired, nor been a part of. I'll be closing all accounts; but my concern is that HSBC have now significantly increased the risk that I might be a target of identity theft. My thoughts are that freezing accounts is a [problem] used to collect data otherwise denied by the now active GDPR. The current banking rules mean I would not be able to withdraw my own funds from my own account in my own branch without presenting data to the HSBC database which they don't have. How can a bank be allowed to do this?