I recently took out a car insurance policy with Adrian Flux. As things turned out I had cause to cancel it yesterday, and today received an e-mail demanding the balance of the full fee. If I didn't pay it within 7 days they would take the money from the card I had used to pay the deposit.
I immediately e-mailed them back pointing out that one of the eight underlying fundamental principles of DPA 1998 is that data should be held for no longer than was necessary, and as such they were in breach of the DPA still holding my card details. I stated I would be reporting them to the ICO and insisted they confirm, in writing, that all my card data had been removed from their systems.
Several minutes later I received an e-mail stating all card details had been deleted.
I post this as a warning for anyone else with this, or possibly other insurance companies. The danger of ID theft etc... is obviously significantly increased if companies such as these are holding personal data which should be deleted immediately it has been used.
Next time you hand over your card number to pay for something like an insurance deposit, it might be worth asking what is going to happen to your card details once the transaction is complete.
I immediately e-mailed them back pointing out that one of the eight underlying fundamental principles of DPA 1998 is that data should be held for no longer than was necessary, and as such they were in breach of the DPA still holding my card details. I stated I would be reporting them to the ICO and insisted they confirm, in writing, that all my card data had been removed from their systems.
Several minutes later I received an e-mail stating all card details had been deleted.
I post this as a warning for anyone else with this, or possibly other insurance companies. The danger of ID theft etc... is obviously significantly increased if companies such as these are holding personal data which should be deleted immediately it has been used.
Next time you hand over your card number to pay for something like an insurance deposit, it might be worth asking what is going to happen to your card details once the transaction is complete.
Comment