Jump to content


Useful things I worked on re NatWest and 6 years data


yourbank
style="text-align: center;">  

Thread Locked

because no one has posted on it for the last 5431 days.

If you need to add something to this thread then

 

Please click the "Report " link

 

at the bottom of one of the posts.

 

If you want to post a new story then

Please

Start your own new thread

That way you will attract more attention to your story and get more visitors and more help 

 

Thanks

Recommended Posts

I was interested in finding out what NatWest had on me

I thought I would ask them for a Subject Access Request.

 

I used the suggested wording from the ICO and used their register of data controllers to get the address from.

I never sent a thing recorded delivery but normal snail mail.

 

My first response was, do you want statements?

And can you specify the account number involved?

I politely wrote back saying, "I would like a full Subject Access Request".

 

A week later I received recorded delivery a load of stuff and 6 years statements(didn't need them anyway).

 

However, being a former member of NatWest,

I knew they were not complying so I asked them for the stuff from the NatWest Archive, which I duly received today.

 

Curiously there was a line in the letter that stated

"Our standard procedure for providing personal data allows for six years data to be provided."

 

I was intrigued so asked the ICO for a view and they said that it would depend on the data retention policy which could be determined by other legal statutes and regulations. So I asked the question to NatWest, what is your data retention policy?

 

A few emails later and I got this response:

 

"if I make a SAR request would I expect to receive ALL data on my account or would it be restricted to 6 years worth of data? It would be restricted to six years

 

To follow up on termination of accounts, and the issue of SAR would that be expected to be produced on a Full Subject Access Request? Again six years back from the day you request the information"

 

Those of you that know me,

will realise that I wasn't happy with the response

I asked for a view from the ICO and there response verbally to me was about "disproportionate effort" within the Data Protection Act 1998.

 

More to come on this but if the bank have not sent data to you from October 2002 go backwards to 1991/92 then send them a polite request for the Notes on the archive. If you want me to explain more on the Archive notes, I can :D

Edited by dx100uk
formatting

.

FSA Waiver on Bank Charges:http://www.fsa.gov.uk/pages/Doing/Regulated/Notify/Waiver/pdf/dir_quart_0709.pdf

Link to post
Share on other sites

Yes please. A full explanation of the system and archive notes would be very useful for all of us.

Link to post
Share on other sites

By the way, "disproportionate effort" does not refer to the effort required in searching for the data and laying hands on it.

"Disproportinate effort" refers to difficulty in presenting it in some intelligible form.

 

So for instance, if your personal data included your genetic map. having it rendered into some alphabetic form might involve disproportionate effort.

If you wanted transcriptions of phone calls then the renderig of recordings into transcripts mght involve disproportionate effort.

There might be some instances where your dislosure might have to be made by, say, a visit to the data controller's premises because anything else might involve disproportionate effort.

 

However, the overriding principle is that the data MUST be disclosed - regardless of the effort involved.

It is only the manner of its disclosure which is subject to a test of proportionality.

 

 

The IC is avoiding the issue and is incorrect (and it won't have been the first time either)

Link to post
Share on other sites

NatWest Archive is the previous computer system that was used prior to integration with RBS Group system. What that meant what that for every loan you took out, every item returned was recorded on the NatWest Archive. That means that providing the bank do not look at the DPA 1998 and "disproportionate effort" that everyone is entitile to those notes. I know I have suggested it previously with regards to finding accounts when they are closed but it has other useful bits.

I think BF you were helping Sneax, this will help him get his details going back to 1995, if I remember rightly on his thread.

 

EDIT: that is from October 2002 back to 1991/92

.

FSA Waiver on Bank Charges:http://www.fsa.gov.uk/pages/Doing/Regulated/Notify/Waiver/pdf/dir_quart_0709.pdf

Link to post
Share on other sites

ICO mentioned emails for example, if you SAR an organisation for emails and there say 1000 emails to find that it could be classed in that manner.

.

FSA Waiver on Bank Charges:http://www.fsa.gov.uk/pages/Doing/Regulated/Notify/Waiver/pdf/dir_quart_0709.pdf

Link to post
Share on other sites

Please see this thread and the link to information Commissioner guidance on the satisfying of SARs

http://www.consumeractiongroup.co.uk/forum/debt-collection-industry/199553-data-protection-sar-guidance.html#post2168775

Link to post
Share on other sites

  • Recently Browsing   0 Caggers

    • No registered users viewing this page.

  • Have we helped you ...?


×
×
  • Create New...