DPA Sec 7.1(c)

[Glenn UK]

Dear All

 

I have several accounts under the control of GE Money (three store cards and a loan for some furniture) all not closed. Searchng the register of data controllers it appears that GE money only have one.

 

I served a S.A.R - (Subject Access Request) for the furniture account I originally knew this as 1st National.

 

I subsequently served a Second SAR for two of the store cards.

 

The third store card I have as yet not served a SAR on GE Money.

 

(I know that i could have done the lot on one SAR but i didint realise that the accounts were all GE money until after I served the 1st SAR)

 

Now the point/question.

 

SEc 7. 1 © says 'to have communicated to him in an intelligble form

 

i)the information constituting any personal data of which that individual is the data subject, and

 

ii)any information available to the data controller as to the source of those data, and

 

Now it seems to me that despite the fact that we might request data under a single account number that the Act implies that in fact the Data Controller should supply all data held.

 

Does anyone esle think Im right or am i barking?

 

Glenn

 

 

• 
  

[bill-k]

Of course you're right Glenn (you're probably barking, too, after the stress & grief you seem to be getting !!) - but I doubt if any staff at the Data Controllers' offices have ever been told to make themselves familar & conversant with the DPA. (Correction - they were probably told - once, and very quietly) The only active training they probably get is how to fob punters like us off with the old story "We know what we're doing because WE'RE the professionals - not you lot."

 

Corporate arrogance - it's only when the likes of you or I actually NEED to know about the Act that it ever gets read. Still - it gives you the upper hand, as they are effectively demonstrating their ignorance of it. What do they know - they haven't needed to research their position before, have they ?

 

I belive Einstein's view was that it's not what you know or can hold in your head - it's whether you know where to find the info, and whether you know what to do with it. I think he said summat like "You can pick your friends, but you can't pick your relatives." Never did get that. As for imposing a blanket speed limit of 186,000 miles per second, I think he saw too much Star Trek. 70mph is fine by me. Barking...moi ? it's relative, innit ?

 

Kirk - out.

[bill-k]

Glenn,

I have just received a bunch of SAR statements for just ONE account, and only going back to 1999. Although I only gave them one account number on my SAR, I used the BAG template requesting ALL info held for us both. We have had several accounts, all at our current address.

They also said this: "With regard to your request for information relating to manual intervention on your account, CrapBank plc is under no statutory obligation to record this information and therefore I am unable to assist further with your request."

I am about to send them this:

" Dear [Fellow Idiot]

Thank you for finally providing some information concerning our banking history with your organisation. Unfortunately, it is woefully inadequate and falls far short of your obligations under the above Act.

I requested a COMPLETE list of transactions and charges relating to our banking history with your organisation. So far, you have provided a PARTIAL list, which pertains only to one account which we have held. There are other accounts, which we have jointly or separately held over recent years, and which we require COMPLETE records of.

We also require this information to cover the ENTIRE periods for which these accounts were held, and would remind you that there is no stipulation that your obligation under the Act extends no further back than 1999, neither is there an option under the Act to conceal information which you consider that you are not obliged to record. If it is recorded, then you must disclose it. If it is not recorded, then you must confirm that there is no record of it.

Consequently, we require FULL DISCLOSURE of ALL information held, including any record of manual intervention. If there is no record of manual intervention, then we require your clear confirmation that there are no such records of such available.

Please be aware that failure to adequately do so will be considered a contravention of the Act, and will be pursued in law by us.

Yours faithfully,

 

bill-k "

 

 

 

Does that seem OK ?

 

(yes...I'm back...sorry !! )