Subject Access Request reply help

[Bazza]

I sent a Subject Access Request to the company concerned.

Enclosed proof of old address and new address.

£10 payable fee and a copy of old correspondence letter with company.

Today I have received the attached response in which I find confusing as we are not the third party ?

They say that they have information on their electronic database and therefore should they be obligated to provide details that they hold ?

Do I send a failed SAR letter or just reply reminding them of Data Protection Act 1998 conditions ?

oh and they have cashed the cheque for £10 !

Any comments would be appreciated.

[nemesis45]

Re: Subject Access Request reply help

I sent a Subject Access Request to the company concerned.

Enclosed proof of old address and new address.

£10 payable fee and a copy of old correspondence letter with company.

Today I have received the attached response in which I find confusing as we are not the third party ?

They say that they have information on their electronic database and therefore should they be obligated to provide details that they hold ?

Do I send a failed SAR letter or just reply reminding them of Data Protection Act 1998 conditions ?

oh and they have cashed the cheque for £10 !

Any comments would be appreciated.

Hi Bazza, A Subject Access Request is limited to data referring personally to the data subject i.e., you, if a document or electronic record refers to a person who can be identified by disclosure of the document or record it will not be provided.th
Perhaps the data you require falls into this category.

nem

[Bazza]

Re: Subject Access Request reply help

Hi Bazza, A Subject Access Request is limited to data referring personally to the data subject i.e., you, if a document or electronic record refers to a person who can be identified by disclosure of the document or record it will not be provided.th
Perhaps the data you require falls into this category.

nem

Thanks nem and understand what you are saying but it seems that their response is not very clear.

So they are stating that they hold information of our previous address and names (edited bit) including contactable telephone numbers.

Then under that they comment that info is held on their database and it has not and will not be shared with a third party ? Does not really confirm anything about disclosure of someone else do you not think ?

Cheers

Bazza

[FlamingParrot]

Re: Subject Access Request reply help

I sent a Subject Access Request to the company concerned.

Enclosed proof of old address and new address.

£10 payable fee and a copy of old correspondence letter with company.

Today I have received the attached response in which I find confusing as we are not the third party ?

That statement merely confirms that they haven't shared the data with anyone nor have they any intention of doing so, i.e. they are complying with the DPA. It's doesn't say they can't share it with you because you are a third party.

They say that they have information on their electronic database and therefore should they be obligated to provide details that they hold ?

What they are saying is that the few lines you've blanked out on your letter are the only information they hold on their database and they are providing it to you. Presumably those lines were your name and address at the time and very little else.

Do I send a failed SAR letter or just reply reminding them of Data Protection Act 1998 conditions ?

oh and they have cashed the cheque for £10 !

Any comments would be appreciated.

I suspect their argument would be that they no longer hold any further data about you on file given that your dealings with them were 18 years ago.

- - - Updated - - -

So they are stating that they hold information of our previous address and names (edited bit) including contactable telephone numbers.

Then under that they comment that info is held on their database and it has not and will not be shared with a third party ? Does not really confirm anything about disclosure of someone else do you not think ?

What they're trying to say is that they have always complied with the DPA by not sharing the data they hold about you with any third parties.

[Bazza]

Re: Subject Access Request reply help

That statement merely confirms that they haven't shared the data with anyone nor have they any intention of doing so, i.e. they are complying with the DPA. It's doesn't say they can't share it with you because you are a third party.


What they are saying is that the few lines you've blanked out on your letter are the only information they hold on their database and they are providing it to you. Presumably those lines were your name and address at the time and very little else.


I suspect their argument would be that they no longer hold any further data about you on file given that your dealings with them were 18 years ago.

Thanks FlamingParrot for your reply.

Sorry I misunderstood as previous replies received to the same effect usually contain a bit more detail.

I have most of old info anyway, it's just that I was after anything that was missing.