Tweet
Hi everyone, hoping someone can help.
I sent a SAR off to a loan company and got sent a load of stuff that whilst somewhat useful, is not what I asked for.
I used a std SAR request template letter, then followed up (within the 40days) asking for additional information, Notes, email and telephone transcripts etc.
They have sent a letter quoting section7 of the Act;
http://www.legislation.gov.uk/ukpga/1998/29/section/7
(Guide for Organisations quoted, though)
Stating that the Data controller is only obliged to provide information not documentation.
Hence they have complied.
Surely this can't be right,
Help/advice on my next course of action greatly appriciated.
I sent a SAR off to a loan company and got sent a load of stuff that whilst somewhat useful, is not what I asked for.
I used a std SAR request template letter, then followed up (within the 40days) asking for additional information, Notes, email and telephone transcripts etc.
They have sent a letter quoting section7 of the Act;
http://www.legislation.gov.uk/ukpga/1998/29/section/7
(Guide for Organisations quoted, though)
Stating that the Data controller is only obliged to provide information not documentation.
Hence they have complied.
Surely this can't be right,
Help/advice on my next course of action greatly appriciated.
Comment