Vanquis DPA Breach!!!

[ben13]

Just had a call from them regarding my account.

They for me by my first name and didnt say where they were from until I got a bit pushy with them.

When the woman eventually told me she was from vanquis and asked me to answer security questions I said
"before we go any further can you tell me why your calling when I spoke to someone yesterday"

She then talked openly about my account without even finding out who I was!!!!

What action should I take regarding this serious breach of the DPA??

[Caspar]

Re: Vanquis DPA Breach!!!

Do you have any record of this, or would it boil down to your word against hers? If the former then you can pursue a legal route, if the latter, unfortunately I think all you can really do is use their complaints procedure. That doesn't of course preclude you reporting the incident to the ICO anyway, but I doubt it will get anywhere. Your other hope is that they may have the conversation recorded and an SAR would reveal this.

[ben13]

Re: Vanquis DPA Breach!!!

Sadly I have no record of it so I think a SAR maybe in order.
Anyone have an address for vanquis compliance?

[charitynjw]

Re: Vanquis DPA Breach!!!

What country were they calling from, ben?
& have you checked the ICO Data Controller database?

http://www.ico.gov.uk/ESDWebPages/search.asp

[ben13]

Re: Vanquis DPA Breach!!!

Calling from england, off to check it now thanks charitynjw

[Caspar]

Re: Vanquis DPA Breach!!!

I don't know what knowing who the Data Controller is will achieve if it is one persons word against anothers. If there is a recording of the conversation at their end, then obviously that would be different.

I know the Data Controller is ultimately accountable for all handling of data within their organisation, but if the person concerned can be tracked down and asked about it, if she says no it didn't happen, then I don't know what s/he could do.

As said in my first reply though, there's no harm in putting in a complaint and seeing what happens.

[charitynjw]

Re: Vanquis DPA Breach!!!

I don't know what knowing who the Data Controller is will achieve if it is one persons word against anothers. If there is a recording of the conversation at their end, then obviously that would be different.

I know the Data Controller is ultimately accountable for all handling of data within their organisation, but if the person concerned can be tracked down and asked about it, if she says no it didn't happen, then I don't know what s/he could do.

As said in my first reply though, there's no harm in putting in a complaint and seeing what happens.

Hi Caspar,

You'd be surprised (maybe) how many firms are not registered - naughty people lol

[ben13]

Re: Vanquis DPA Breach!!!

Just had a call from Vanquis and yet again they discussed my account with me without security questions.

They asked me if i was the account holder and thats it.
when I pointed out that they had just breached the DPA but not confirming I am who am.

The woman told me that this is 'operating procedure' and 'we asked if you was Ben13 and you said yes. That is enough to prove we havent broken any rules'.

Advice please you lovely lovely people

[leclerc]

Re: Vanquis DPA Breach!!!

Just had a call from Vanquis and yet again they discussed my account with me without security questions.

They asked me if i was the account holder and thats it.
when I pointed out that they had just breached the DPA but not confirming I am who am.

The woman told me that this is 'operating procedure' and 'we asked if you was Ben13 and you said yes. That is enough to prove we havent broken any rules'.

Advice please you lovely lovely people

tell her you're Spartacus if asked!!!

Just because you say yes does not mean you are the person since if you said no, would she believe you?

[ben13]

Re: Vanquis DPA Breach!!!

tell her you're Spartacus if asked!!!

Just because you say yes does not mean you are the person since if you said no, would she believe you?

lmao.
That was the point I made to her yet they seem to think that they are doing nothing wrong.

[Caspar]

Re: Vanquis DPA Breach!!!

DPA states they have to satisfy themselves as to your identity. Personally I do not feel you just saying you are who you are does this. I believe there should be further questions (normal security procedures) that they should follow. I'd still be inclined to ask who for details of their Data Controller and write to them, but ideally get a reccording first to prove what you are saying and if they don't respond, send details and the recording to the ICO.

[ben13]

Re: Vanquis DPA Breach!!!

looks like i'm just gonna have to find a cheap telephone recorder!!!
How can a simple 'yes' satisfy DPA?
The problem with this country is everything is left open to interpretation sadly

[Caspar]

Re: Vanquis DPA Breach!!!

You don't need a cheap telephone recorder. If you have a mobile then you most likely have a voice recorder. Put in a 2 meg memory card and you can record a pretty llengthy conversation for a few pounds. This can then be copied to your computer and then deleted to free up memory space for the future.

[ben13]

Re: Vanquis DPA Breach!!!

my crappy phone doesnt have that. Although maybe one of my kids phones has that facility.

[CleverClogs]

Re: Vanquis DPA Breach!!!

tell her you're Spartacus

No!

I'm Spartacus! :tung: