Subject Access Request Question

[up2meears]

Morning all,

 

I have a quick question about an SAR I sent to Satans bank.

 

They have responded to my SAR by sending a 'letter of permission'

 

It says:

 

Dear Sirs,

 

This letter is to give my permission for Satans bank to send me the data they have compiled in response to my recent Data Subject Access Request

 

They have even put a little 'please sign here' post it between yours faithfully and my name :!: (thanks santy, wouldn't have worked that out for myself)

 

Is this normal or are they after my signature as I always thought this was not required for a SAR?

 

I have already lift proofed it, just after your thoughts before I send it

 

Many thanks

Up2

[citizenB]

What are they on ? You have made a legitimate request for the data - what did they expect you wanted them to do with the information once they had collected it together.. shred it ?

 

Of course you want the stuff sent to you.. ? Are they within the time limit of 40 calendar days ?

 

There is no requirement for a signature to be provided, and if they have been communicating with you recently then there should be no reason for them to question who you are.. but it looks like you might need to give them a squiggle..

 

You can make your signature slightly different or simply put a couple of lines through it once you have signed..

[up2meears]

Thanks CB,

 

That's what I thought about a SAR not needing a sig. My address has changed since last transaction but when I SAR'd them for my GE Money cards, they sent that no problem.

 

I have drawn a grey and red grid over my signature and also slightly changed it. I was also to tempted to write at the end of the letter, 'although this is not required for a subject access request'

 

Oh well lets see what they come back with.

 

Thanks again CB

Up2

[dx100uk]

an sar should always be signed

 

dx

[alienskumm]

I refused a signature on a Tesco bank sar based on the fact they wrote to me at my address. so they must believe it was me or they are in breach of data protection just by writing to someone who may not be me.

 

i hope that makes sense.

 

AS

[dx100uk]

its a legal request

 

sign it

 

its going to the OC

they wont lift it

 

dx