Hi, Im trying to unravel my late father's very complicated finances, as I'm his executor. I found a letter from Hoist Finance dated from last year stating they own the account, with an outstanding balance of £2131.92. When I phoned to say he'd died they told me it would be passed to 'Philips and Cohen' - this was mid-January and I've heard nothing (luckily). Having read these forums I then wrote to MBNA requesting all his account data but they replied stating the 'GDPR only applies to personal data relating to a living individual'. is this true?There's also a letter relating to another MBNA debt from Link Financial, so they have sold the two on. I need to know how old these are etc. Letters scanned and attached. The reason I'm confused is I've also written to Santander (using the same template letter) and have received all the loan info so they obviously have different rules! - I'm not willing to settle anything unless I know how old these debts are and what they relate to. We couldn't find any paperwork at my Father's house. Any advice as what to do next - I did send certified copy of probate certificate with my requests. Many thanks for reading! scan0041.pdf scan0040.pdf

Hi I am helping a friend out with a PPI claim and have sent off the SAR to Santander back in January. This was in respect of an old Dorothy Perkins storecard account she held some years ago. They have replied and provided: CCA's for each account, we requested one and they have sent info for 3 (some of which she had forgotten she had) Lists of transactions - these are mainly internal info and not something useful to us as it seems to be a list of dates and codes (account notes) The letter says available copy statements are enclosed where applicable - but none are Also says that Copies of any correspondence is enclosed but again - there is none enclosed. There is one page which says they no longer hold any information on this account - however they do state an account number. My question is how do we go about finding out the specifics of PPI itself if they only provide the above information? They haven't provided any statements at all (i know they don't have to - and my friend no longer has them) so we have no way of knowing if and what the amounts of PPI added to the accounts were. I would be really grateful if someone could advise my next course of action. Many thanks

Hi all, I am helping a friend send a SAR to a company. They can be sent by email, I believe. I wanted to check that it is essentially the same as if you were doing it by letter? Thanks, C

Evening, I requested a SAR from Co-op, I had a loan from them several years ago. I gave my name, address from when I made the application and the reference number from the loan. They have replied to me saying they are unable to verify my signature(s) after checking my records. They have asked my to provide photographic ID in order to investigate the matter further. Is this normal? Has anyone experienced this with Co-op? I've requested SAR from other places with no issues. Many thanks

Hello folks, I tried taking out a mobile phone contract with EE in 2016. I was declined and, on contacting EE, was told there were three T-Mobile accounts in my name from 1999-2002 (approx) with an outstanding debt of around £450 in total. I finally got round to sending an SAR letter last month and received a reply today. EE have sent me a couple of pages of account notes but no mention of the outstanding amount(s). Firstly: based on this, I'm pretty certain that EE have sent me incomplete data - however, without knowing how their systems work, I don't know _what_ data they must hold on me, but at the very least, somewhere, there must be a total amount owed. Secondly: the notes say that I disputed that the accounts were mine (which I did), and EE decided that it wasn't fraud because the accounts were opened using my name, address and date of birth. I genuinely don't remember opening these accounts. How can EE be so certain that I opened these accounts simply by checking that my name, address and date of birth match? I just want these accounts removed from my record so I can, should I still want to, take out a new phone contract with EE. Is there anything I can do here, or do I just need to accept defeat and find a different mobile phone company? Thanks in advance Alex

Hi, I am using a template letter. Should it be addressed to Halifax PLC? Bank of Scotland Group Plc, something else? I am using address found in Bank of Scotland privacy policy pdf.

Can't find a sar template for shop direct can anyone help? i intend it to send it via email, dont want to post or have facilities to print etc. email only. Basically I just want all statements including charges, how much i paid etc as i want to reclaim unfair charges eventually once i know all the facts its for littlewoods and very and the accounts were started in 2010/11 i believe, will they provide for the entire 7 or 8 years?

Good Afternoon, I sent a SAR to Lantern (Formally Motormile) on the 28/09/2018 and I have today received the SAR pack back. I'm looking for some advice on what to do next as I feel all these accounts could be statute barred. I would like to give an overview of each account and what the SAR contains to see if anyone can offer some advice on what my next step should be. Account 1 Value £1170 Account Start Date- 15.06.2012 Default Date- 29.06.2012 Payments made/acknowledged - NO Contains CCA - YES Notice of Assignment- NO Account 2 Value £200 Account Start Date- 30.11.2011 Default Date- Unknown Payments made/acknowledged - NO Contains; CCA - YES Notice of Assignment- NO Chase Letters - 2 Account 3 Value £270.10 Account Start Date- 21.06.2012 Default Date- Unknown Payments made/acknowledged - NO Contains; CCA – YES (Not signed by original creditor) Notice of Assignment- NO Chase Letters - 5 Account 4 Value £250.00 Account Start Date- 02.09.2011 Default Date- 07.12.2011 Payments made/acknowledged - NO Contains; CCA – NO Notice of Assignment- NO Chase Letters – NO Statement of Account - YES Other than 2011/2012 I’ve had no other issues and everything has now dropped off my credit files, I’d just like to put this to bed. I would be grateful of any help you may be able to give. Thanks

Hello I am just about to commence a PPI re-claim on an old Alliance & Leicester personal loan. There appears to be a number of addresses to where the SAR letter should be sent. Can anyone please confirm which is the best (correct) one to use. The options I have are:- Customer Services, Santander Consumer, Santander House, 86 Station Road, Redhill RH1 1SR. Alliance & Leicester Personal Finance Limited Building 3 Floor 2 Carlton Park Narborough Leicester LE19 0AL Santander (Abbey, Alliance & Leicester) Abbey National House 2 Triton Square Regent's Place London NW1 3AN Santander SAR's team P.O. Box 1111 Bradford BD1 9NQ If non of the above are the correct address, I would greatly appreciate info. on where it should be sent. Thanks James

Hi guys These recent experiences may be helpful. I submitted an email GDPR SAR request to Cabot based on CAG guidence regarding a threat with menace that is statute barred. I received an automated email the next day requesting name, rank, number, D.O.B. etc within two months (I kid you not). Two weeks later I receive a template postal reponse relying on Article 6 of the Regulation and a lawful base for processing personal data. Helpfully, Cabot confirmed that they were now the Data Controller and that they had received my SAR request (which is now some 28 days ago). Whilst my balls are not crystal... you can read the rest. " Dear Sir I note your mailed letter dated xx August 2018 purporting Cabot Reference xxxx7666 (Corbyn might call this a lack of an English sense of irony). I thank you for confirming that you are now the Data Controller. I thank you for confirming receipt of my Subject Access Request of xxth July 2018 and your 'relevant team's' response of xxth July 2018. You will be conscious that, under the new GDPR regime, you have one month from its inception to comply with my GDPR 2018 Subject Access Request. " On a different, yet related note, I received a letter before action (based on the new pre-action-protocol) from Robbers Way on an Egg account that is statute barred and submitted the advised CAG response. I have the standard response; account on hold blah-di-blah. These two CAG advices that I deployed might be usefully signposted as powerful tactical weapons. Love vic x

i have just had a letter back saying my credit card around 2001-4 is outside of banks retention period so they cannot provide the data i asked for for my sar. so i assume the ppi complaint i sent will also be declined.... shocking.... they are of course lying through their back teeth any suggestions of how i should respond???

Is the new GDPR SAR template suitable for a medical records request from a GP without any specific alterations? Thanks.

Today I received a large pile of documents from Prestige Finance, with whom I have a second mortgage. I have identified 10 unlawful charges of £35 each. But this account was previously held by lenders GE Money. Either they went into administration and "became" Prestige Finance, or GE Money simply sold my account to Prestige Finance. I have identified seven unlawful "administration charges" of £40 each while the account was with GE Money, before I found my account being handled by Prestige Finance. So my question is in two parts. 1. Am I entitled to recover the £280 unlawfully charged to me by GE Money before Prestige Finance aquired the account (and if so, who do I get the money from? Prestige? Or GE, who may no longer exist?) I had always assumed that if a going concern such as a lender was aquired by another going concern then the buyer going concern would also be buying the seller's liabilities as well as its assets (in which case Prestige would be liable to refund me the money that GE had stolen from me). But I may be wrong in this case. 2. How do I get my money back from Prestige Finance? Do I just ask for it back or do I need to take them to court? Can I charge interest at the statutory 8% and how can I calculate that? Can I add on anything else such as the time it has cost me and also the stress? Thanks in advance.

Sent a SAR to Barclays bank on behalf of my father who signed the letter. He has been with the bank for over 60 years. They send his cards and statements to his address. Got a letter to say that they will only send him his details until they phone him up to prove his identity. It's been over thirty days and we have received no phone call. Why should he have to phone them. We thought it would be straightforward. Had mortgages and credit card with them for years. What should we do now?

Hello Caggers just after a bit of guidance, I have sent a SAR to HSBC and pretty much been ignored ended up lodging complaints to FOS and ICO, the end game is all about PPI. I am corresponding with ICO and they will only get involved if HSBC have refused or ignored my request. I told the ICO my request has been ignored and sent them a signed receipt for the SAR delivered into a HSBC branch for delivery through internal mail system to HSBC data controller. The ICO have now come back and said this is not proof the bank have received the SAR and not proof the bank have been given proof of ID. Is this similar to other folks experience with ICO. How can I prove when the SAR was delivered to HSBC with my proof of ID that's exactly what it was and nothing else. Happy to provide more info from the ICO email TIA.

Hello everyone What an absolute brilliant forum this is - so much information and can also be a little overwhelming, well for me anyway. I have a question about SARs with Energy companies if I may, well I guess it applies to any SAR but mine is with an Energy company. Q- if i raise a SAR they have to give all the information they hold about me - this i understand. BUT does this include any discussion the company has with its legal people be they in house or an external 3rd party, where I am mentioned? Hoping for an easy to understand answer! Best BH

I applied for a Subject Access Request to Barclays. Roll on 40 calendar days* Barclays send me two packages via courier. One of them had bank statements and letters belonging to a Nigerian businessman. Some letters were about freezing his accounts due to a court injunction/restraining order, unfreezing it after the court discharged the restraining order, and eventually the accounts being closed by Barclays a few days later. (See redacted documents attached) The statements cover a two year period at least. There was also a letter about a children's Instant Saver Account. (see attached) Account numbers, sort code, address, all transactions on his account...the lot. Pretty shocking how reckless Barclays have been with his data. The worst part is, Barclays say in their GDRP letter sent to us: 'Barclays is committed to protecting your personal data..". Does anyone know if I should complain to the ICO or is it Barclays? It used to be ICO. This may have changed after GDPR came in to play. * - I applied before GDPR came in to force, so deadline was 40 days not 30 as it is now. Barclays-Mr-X-Accounts-Closed.pdf Barclays-Mr-X-Unfreeze-Accounts.pdf Barclays-Mr-X-Restraining-Order-Freeze-Accounts.pdf Barclays-Mr-X-Child-Saver.pdf

Hi all, I'm planning to send a SAR to HSBC on behalf of a friend who holds a credit card, a current account, a savings account and a loan account with them. My friend lives in Jersey, where all dealings with HSBC have been conducted. Can anyone please confirm if a single SAR is sufficient to cover all of the above accounts and the correct address to which it should be forwarded, given the location being Jersey and I am unsure whether or not banks fall under the same legal jurisdiction and share the same administration offices as do those in the UK, or are classed as separate entities? Thanks in advance.

i am writing on behalf of my wife. she was employed as a manager for just over 6 months, her employer phoned her up just under a week ago and told her they was terminating her contract as of immediate effect. This was done without any probation meetings and no meetings prior to raise any concerns. I don't want to go into much detail as at the moment she has just started by raising this problem with ACAS. The employer has since claimed via a letter a fictitious probation meeting took place AFTER the dismissal via phone call! This was probably done by them to distract from they acted unprofessional and possibly against employment law. She had disclosed all her health problems at the original job interview and recently was found to have some other problems arise during her employment. She has had time off because of her disclosed health problems but these have been for hospital appointments and she was told to put them in as sometimes sick and sometimes annual leave. Just before the phone call terminating her employment she had informed her Line manager she was going to the GP as she has been under a significant amount of stress with her job, within 10 minutes of notifying the line manage she received the call from the owner of the company terminating her contract. The doctor who assesses her gave her a fit for work note stated work related stress. i would like to point out that they are not going down the health route for sacking as that would be discrimination and they was made aware of that by my wife about 5 months into her employment after they was complaining about time off for appointments. She told her employers she was going to acas as she felt she had not been treated fairly to which the owner said they have a lot of businesses and have a lot of solicitors that they can seek advice from if she chooses to go down that route. anyway i went off course a little but i felt i needed to share a little info as a lead up to my question. As she has already seeking advice from acas under the new data protection rules would/should she make a SAR request to see exactly what info they have or wait until it goes to tribunal? is there a template for an SAR request with the new rules listed and also what can she ask for... also is it possible to ask for any emails, possible taped phone conversations although my wife was never told of any phone conversations that were being recorded, texts, correspondants etc which my wifes name is included in. any info would be greatly appreciated thank you

I am helping a friend with a PPI claim , I recently sent off a SAR to Capital One , within two weeks they sent her a bundle , in it was the original agreement, the PPI yes/no boxes were unticked and yet when I went through the payment/charges sheets they showed itemised PPI charges for £134 , the actual card limit was only for £200 but it ended u over £400. I would like to claim back the PPI for her even if it only serves to reduce the amount she owes, and obviously she can't claim interest because the interest has been frozen on her debt as part of the CCCS and DMA agreement. Can someone tell me how to word the letter with the Plevin ruling in mind.

Hello Caggers Any help surrounding a SAR with Lloyds and HSBC. I've been going backwards and forwards with Lloyds for nearly 4 months," no record of my account in their system,please supply full account no." Raised a SAR and finally they find me in their system but are requesting certified only documentation as proof of name and address. I must add I live overseas so any correspondence is a really drawn out process, it appears to take 5 weeks for a letter to get to Australia from Lloyds. Do the banks normally stipulate certified paperwork only? It feels like the bank are putting up as many barriers as possible. Having the same problem with HSBC who haven't even acknowledged my SAR.

I want to send a SAR to barclays about an old egg card I had which they now own. The address I have is: Barclaycard Customer Relations Dept PO Box 9131 51 Saffron Rd Leicester LE18 9DE Is this the correct address to send the SAR? Many thanks!

Morning everyone Received letter from Shop Direct on 28th March to say they sold my Very account to them. Shop Direct is still showing on my credit file. Could anyone advise who I should SAR? Thanks so much

I believe that a former employer may have acted unfairly against me whilst I worked there and I'm intending to SAR them to see if there is any evidence of this which I can use. I do not know where the evidence may exist or in what form, whether it is in emails, phone calls (which I know to be recorded and stored) or paper records so I would like to make a SAR for every piece of information they have. I also obviously do not want to disclose the reason for my request and find that the evidence I'm looking for may miraculously disappear. I am uncertain whether it's better to make a SAR in the next couple of days (before GDPR comes in), or wait until next week when GDPR is introduced. Under the present system, AIUI I pay the statutory fee of £10 but I then have an unqualified right to request all information. However, under GDPR the statutory fee is abolished but they will be able to charge a 'reasonable fee' where the request is 'manifestly unfounded'. Is there any guidance as to what a reasonable fee might be (lower/higher/the same as the current statutory fee?), and what qualifies as a 'manifestly unfounded' request - is a general request for all data rather than a targeted request considered 'unfounded' in itself?

Hi Peeps Slowly making my way through Payplan DMP..aiming to obliterate them all at last. Lloyds Current Account O/D £900.00dr sorry been paying them £1 month recently payplan. 10 year old debt - fallen of CRF. obviously being fleeced as debt not really gone down. What letter do I send to Akinika ? unsure of this one as current account. Thanks Peeps