Complaints received by the ICO regarding the failure of Banks, Building Societies and credit card providers to comply with the subject access requirements of the Data Protection Act 1998 :
''we have not taken enforcement action against any bank, building society or credit card provider for failing to comply with section 7 of the Data Protection Act 1998 since April 2006'' - ICO - March 2009
''we have not taken enforcement action against any bank, building society or credit card provider for failing to comply with section 7 of the Data Protection Act 1998 since April 2006'' - ICO - March 2009
25th March 2009
Dear (Amethyst)
Request for Information
Further to our acknowledgement of 12 March 2009 we are now in a position to provide you with a response to your request for information dated 4 March 2009.
In your e-mail of 4 March you expressed an interest in the number of complaints we have received regarding the failure of banks, building societies and credit card providers to provide complete information to individuals who had exercised their right of subject access under section 7 of the Data Protection Act 1998. Specifically, you asked for:
1.The number of complaints received by the ICO monthly since April 2006
2.The number of complaints which led to enforcement notices by the ICO monthly since April 2006, and
3.The number of complaints upheld by the ICO monthly since April 2006.
Please find attached a table of figures which illustrate the number of complaints we have received, and of those which have been upheld, monthly since April 2006 (ie in response to queries 1 and 3). The figures shown for each month relate to the complaints received, and subsequently upheld, for that month, to enable you to conduct a direct comparison. For example, of the 59 complaints that were received in December 2006, 30 of them were upheld.
Having checked with my colleagues in our Regulatory Action Divison・s Enforcement Team I can confirm that we have not taken enforcement action against any bank, building society or credit card provider for failing to comply with section 7 of the Data Protection Act 1998 since April 2006. For this reason I have not made any reference to this in the attached table.
I hope that this provides you with the information you require. However, if you are dissatisfied with this response and wish to request a review of our decision or make a complaint about how your request has been handled you should write to the Internal Compliance Team at the address below or e-mail Internalcomplianceteam@ico.gsi.gov.uk
Your request for internal review should be submitted to us within 40 working days of receipt by you of this response. Any such request received after this time will only be considered at the discretion of the Commissioner.
If having exhausted the review process you are not content that your request or review has been dealt with correctly, you have a further right of appeal to this office in our capacity as the statutory complaint handler under the legislation. To make such an application, please write to the Case Reception Team, at the address below or visit the ・Complaints・ section of our website to make a Freedom of Information Act or Environmental Information Regulations complaint online.
A copy of our review procedure is attached.
Yours sincerely
Antonia Swann
Assistant Internal Compliance Manager
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Tel: 01625 545894
Email: antonia.swann@ico.gsi.gov.uk
www.ico.gov.uk
Case Reference Number IRQ0237592
Dear (Amethyst)
Request for Information
Further to our acknowledgement of 12 March 2009 we are now in a position to provide you with a response to your request for information dated 4 March 2009.
In your e-mail of 4 March you expressed an interest in the number of complaints we have received regarding the failure of banks, building societies and credit card providers to provide complete information to individuals who had exercised their right of subject access under section 7 of the Data Protection Act 1998. Specifically, you asked for:
1.The number of complaints received by the ICO monthly since April 2006
2.The number of complaints which led to enforcement notices by the ICO monthly since April 2006, and
3.The number of complaints upheld by the ICO monthly since April 2006.
Please find attached a table of figures which illustrate the number of complaints we have received, and of those which have been upheld, monthly since April 2006 (ie in response to queries 1 and 3). The figures shown for each month relate to the complaints received, and subsequently upheld, for that month, to enable you to conduct a direct comparison. For example, of the 59 complaints that were received in December 2006, 30 of them were upheld.
Having checked with my colleagues in our Regulatory Action Divison・s Enforcement Team I can confirm that we have not taken enforcement action against any bank, building society or credit card provider for failing to comply with section 7 of the Data Protection Act 1998 since April 2006. For this reason I have not made any reference to this in the attached table.
I hope that this provides you with the information you require. However, if you are dissatisfied with this response and wish to request a review of our decision or make a complaint about how your request has been handled you should write to the Internal Compliance Team at the address below or e-mail Internalcomplianceteam@ico.gsi.gov.uk
Your request for internal review should be submitted to us within 40 working days of receipt by you of this response. Any such request received after this time will only be considered at the discretion of the Commissioner.
If having exhausted the review process you are not content that your request or review has been dealt with correctly, you have a further right of appeal to this office in our capacity as the statutory complaint handler under the legislation. To make such an application, please write to the Case Reception Team, at the address below or visit the ・Complaints・ section of our website to make a Freedom of Information Act or Environmental Information Regulations complaint online.
A copy of our review procedure is attached.
Yours sincerely
Antonia Swann
Assistant Internal Compliance Manager
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Tel: 01625 545894
Email: antonia.swann@ico.gsi.gov.uk
www.ico.gov.uk
Originally posted by Amethyst Original FOI request
Comment