Tweet
Work in progress and not really getting anywhere fast
Ok here is my tilt of the SAR I sent its a long one so bear with me .
Sent 26th March 2007 , received by post 27th March 2007 and by compliance department 28th March 2007
COMPLIANCE DEPARTMENT
M B N A EUROPE BANK LTD
STANSFIELD HOUSE
CHESTER BUSINESS PARK
CHESTER
CHESHIRE
CH4 9QQ
Dear Sir/Madam,
I am requesting details held by your organization and I would like to remind you have until last post on the 5th May 2007 to supply me with all the information I am requesting. The Information Commissioner has asked to be advised if I do not receive the data I have requested by this date. At this stage I ask that you treat this as a Data Protection Act 1998 Subject Access Request and not a complaint. I also believe you may have some records regarding an account I held with yourselves mistakenly issued on your part in the name of Mr. Julian xxx xxxxxx , but as you should be aware this was reported to yourselves and in either case the above address and same date of birth ( xx-xx-xxxx ) applied.
I would be grateful if you would provide the following: -
Where reference to emails is given above, these emails should be taken from your email servers or backups / archives held in a magnetic or digital format. These emails may not be present on a users local system, and may require the assistance of your IT department / IT providers, who you should contact immediately for their provision.
Please confirm whether you hold a physical file with details of my personal and / or financial information. If so, please provide details and dates of any instance when this file has left your control, to whom it has been communicated, the method of transportation / communication e.g. Royal Mail, courier, by hand, electronically. Please provide a full copy of this file Where my physical file has left your offices, please provide details of any precautions taken to ensure that my information has not been lost, stolen, misplaced or made available to anybody who does not have authorized access, including those who would use my information for the purposes of identity theft, or registered with any credit agencies. Please also confirm whether any of the documents held within the physical file are computer generated.
Under S.40 of The Administration of Justice Act 1970, if you believe you have provided my information to any organization, agent, or individual who could, or may have used it for unlawful purposes, you should contact me immediately, and provide full details of their identification and address, together with full details of any instructions you have provided to them. If you have forwarded or communicated my personal or financial information to any person, company, or organization, please provide a copy of the authority, signed and dated by myself upon which you have relied prior to doing so. As requested above, you should provide copies on any such communications.
Under the Data Protection Act 1984 / 1998, as a Data Controller, you are responsible for the complete retraction of all information provided to any third party, should I request you to do so, and have a duty to myself to ensure that any personal or financial information I have provided to you is kept securely, and is only communicated to those to whom I have given my express permission / authority.
I enclose a cheque in the sum of £10 to cover your fee. If you are unable to deal with this request, you should immediately forward it to the person within your organization responsible for Data Protection.
I will be filing in the Wakefield County Court on the morning of 7th May 2007 for Non Compliance and damages, if I do not receive the documentation requested by last post on the 5th May 2007 . A post marked envelope bearing the date of 5th May 2007 does not mean I have received the documentation, unless you have a signature as having received it on the 5th May 2007.
For the purpose of your exercise I have enclosed a copy of my passport for identification purposes. I have been informed by the Courts I do not have provide identification at all.
Might I remind you one County Court Judge is prepared to jail the Data Controller of the Royal Bank of Scotland for not providing information under the Subject Access Request and the stalling tactics used by the Data Controllers to buy time.
Yours faithfully
Mr Tools
Ok here is my tilt of the SAR I sent its a long one so bear with me .
Sent 26th March 2007 , received by post 27th March 2007 and by compliance department 28th March 2007
Data Protection Act 1998
Subject Access Request
Subject Access Request
Mr Tools
xxxxxxxxx Avenue
xxxxxxxxxxxxxx
xxxxxxxxxxxxxx
West Yorkshire
POST CODE
26th March 2007
Telephone No. (you must think I`m daft
)
Email: jules@xxxxxxxxxxx.com
R Vernon xxxxxxxxx Avenue
xxxxxxxxxxxxxx
xxxxxxxxxxxxxx
West Yorkshire
POST CODE
26th March 2007
Telephone No. (you must think I`m daft
)Email: jules@xxxxxxxxxxx.com
COMPLIANCE DEPARTMENT
M B N A EUROPE BANK LTD
STANSFIELD HOUSE
CHESTER BUSINESS PARK
CHESTER
CHESHIRE
CH4 9QQ
Dear Sir/Madam,
I am requesting details held by your organization and I would like to remind you have until last post on the 5th May 2007 to supply me with all the information I am requesting. The Information Commissioner has asked to be advised if I do not receive the data I have requested by this date. At this stage I ask that you treat this as a Data Protection Act 1998 Subject Access Request and not a complaint. I also believe you may have some records regarding an account I held with yourselves mistakenly issued on your part in the name of Mr. Julian xxx xxxxxx , but as you should be aware this was reported to yourselves and in either case the above address and same date of birth ( xx-xx-xxxx ) applied.
I would be grateful if you would provide the following: -
- Full copies of all contracts which you believe exist between myself and your organization, including copies of any documents you hold in support of same.
- Details of the identity of any individuals or organizations who have provided you with my personal information together with copies of any letters of instruction provided by them, or any contracts entered into between yourselves and the third party, and the relevant dates to which those contracts related.
- Copies of all documents which include any of my personal information including copies of any contracts or invoices, emails or computer records containing my personal information, or any records which pertain to this information.
- Full details and copies of any documents upon which you relied when you have provided my personal or financial information to any individual , organization or third party.
- Full copies or transcripts of any computer logs or database records kept in relation to myself or in relation to my financial or personal information.
- Full copies of any correspondence in postal, email or any other format which you have entered into with any individual, organization or third party which contains my personal or financial information, or which pertains to myself.
- Details of all systems you currently have in place to ensure my personal or financial information is kept securely, including details of those officers who currently have control of same, and at the time it was held or provided to a third party.
- Where any previous information or records held have been deleted or disposed of, the methods used to do so, including dates, certificates or references confirming details of destruction. Where you are unable to provide such certificates, please provide a declaration, signed by an authorized officer of your company, confirming the dates and methods of destruction of this data.
- Full hard copy print outs of any of my personal or financial information held in a digital, magnetic or any other format which is held in any archives, backups or other storage devices / locations.
- Your registration number with the Information Commissioners Office.
- Your Consumer Credit License number.
Where reference to emails is given above, these emails should be taken from your email servers or backups / archives held in a magnetic or digital format. These emails may not be present on a users local system, and may require the assistance of your IT department / IT providers, who you should contact immediately for their provision.
Please confirm whether you hold a physical file with details of my personal and / or financial information. If so, please provide details and dates of any instance when this file has left your control, to whom it has been communicated, the method of transportation / communication e.g. Royal Mail, courier, by hand, electronically. Please provide a full copy of this file Where my physical file has left your offices, please provide details of any precautions taken to ensure that my information has not been lost, stolen, misplaced or made available to anybody who does not have authorized access, including those who would use my information for the purposes of identity theft, or registered with any credit agencies. Please also confirm whether any of the documents held within the physical file are computer generated.
Under S.40 of The Administration of Justice Act 1970, if you believe you have provided my information to any organization, agent, or individual who could, or may have used it for unlawful purposes, you should contact me immediately, and provide full details of their identification and address, together with full details of any instructions you have provided to them. If you have forwarded or communicated my personal or financial information to any person, company, or organization, please provide a copy of the authority, signed and dated by myself upon which you have relied prior to doing so. As requested above, you should provide copies on any such communications.
Under the Data Protection Act 1984 / 1998, as a Data Controller, you are responsible for the complete retraction of all information provided to any third party, should I request you to do so, and have a duty to myself to ensure that any personal or financial information I have provided to you is kept securely, and is only communicated to those to whom I have given my express permission / authority.
I enclose a cheque in the sum of £10 to cover your fee. If you are unable to deal with this request, you should immediately forward it to the person within your organization responsible for Data Protection.
I will be filing in the Wakefield County Court on the morning of 7th May 2007 for Non Compliance and damages, if I do not receive the documentation requested by last post on the 5th May 2007 . A post marked envelope bearing the date of 5th May 2007 does not mean I have received the documentation, unless you have a signature as having received it on the 5th May 2007.
For the purpose of your exercise I have enclosed a copy of my passport for identification purposes. I have been informed by the Courts I do not have provide identification at all.
Might I remind you one County Court Judge is prepared to jail the Data Controller of the Royal Bank of Scotland for not providing information under the Subject Access Request and the stalling tactics used by the Data Controllers to buy time.
Yours faithfully
Mr Tools
Comment