Sharing of Data?

[adridude]

Hi,

 

I've just ordered something over the internet and had a call back from the company in question to confirm my identity. They apparently used Equifax to do this, which is fine.

 

What concerns me is that the person on the phone was able to see some very very specific details about me e.g.

 

• Broadband Accounts and Balances
  
• Banking Details e.g. which bank, when I openend the x number of accounts at them
  
• Old CC Accounts
  

 

Are they supposed to be giving any of this information away? Furthermore, are those companies in question e.g. the banks, broadband providers supposed to be allowing Equifax to pass my details on to third parties?

 

This is EXTREMELY disturbing... Is there anything I can do about this?

 

I understand that there's a need for credit reports, but I was categorically told by Barclays that all that's ever shared is a "probability number" rather than personal details.

 

Any input would be handy....

 

Regards,

 

Ade

[silverfox1961]

Interesting question.

I would be looking at the sites terms and conditions on ID checking and the use of CRA databases. By ordering, you may have given them permission to do so. If nothing is in the terms an conditions, they would be in breach of the Data protection Act.

 

If you are only using this website as a one off, your permissions would cease. They are allowed to keep what data they already have for up to 6 years but shouldn't be able to get more.

 

As for your other points. If the data they have obtained is passed on without your permission, they would be in breach.

 

To stop any further data processing, send them a s10 notice.

[Bazooka Boo]

When a lender pulls your credit report, they can see identifying information, your trade lines (accounts), credit inquires, public records and accounts in collection. Your credit report also shows things such as the different types of credit that you use, the length of time your accounts have been open, and whether or not you’re paying your bills on time each month. Information like this adds the layers lenders need when making conclusions about your creditworthiness.

It is somewhat disturbing agreed, but lets not forget, credit files are not for us, they're not ours, they're to make profit between multi million pound companies!

 

http://www.experian.com/blogs/ask-experian/the-good-the-bad-and-the-ugly-what-lenders-look-at-on-your-credit-report/

 

http://www.experian.com/blogs/ask-experian/infographic-what-are-the-different-scoring-ranges/

[unclebulgaria67]

If you did not order anything on credit, it is a breach of the Data Protection act.

 

 

You can report this to the ICO, without needing to advise the company who caused this breach.

 

 

When companies register for DPA purposes,

they have to say how they will use data and all processes they use have to restrict the uses so it is appropriate.

 

 

For example, in financial services companies, if you work in Insurance, you are not allowed to touch or view any records that say relate to Bank accounts or mortgages.

[adridude]

Is there a blanket letter/template I can write to CRA's to NOT give that information out no matter what? Personally it seems like an area which is open to some serious abuse. On top of that, I feel a violated as some stranger out there had literally my whole financial and account information at his fingertips.

 

Surely I've got the right to put a so called "gagging order" on a company when it comes to personal information such as this? It appears that I might as well post them my entire filing cabinet.

[ericsbrother]

no, they are in this to make money and charge the company for searching your file.

You can ask that a password be applied to your account and has to be asked for

so the company doing the search has to contact you beforehand

but at least 2 of the credit reference agencies ignore this marker anyway.

 

I would have told the company asking for the details that I was no longer interested in anything they sell ever.

 

 

Also, I never give out my phone number, even if it is a required field on the form.

I use the non-existent Bedford number 01234 567890 or 00000 000000.

 

As said, unless you are applying for credit or the item costs more than £20k (money laundering regs then apply) they only want the data for marketing purposes

[Bazooka Boo]

Truecall have a number you can use, which when they ring it informs them that you don't wish to be contacted by phone, 0333 8888 8888

[citizenB]

Is there a blanket letter/template I can write to CRA's to NOT give that information out no matter what? Personally it seems like an area which is open to some serious abuse. On top of that, I feel a violated as some stranger out there had literally my whole financial and account information at his fingertips.

 

Surely I've got the right to put a so called "gagging order" on a company when it comes to personal information such as this? It appears that I might as well post them my entire filing cabinet.

 

 

http://www.consumeractiongroup.co.uk/forum/showthread.php?387321-S10-Notice-To-Cease-Processing-of-Data-**Correct-as-at-October-2013**

 

 

You can use the letter in the link above to request that companies cease processing your data.

[adridude]

Apologies for the late reply, thanks for that. I'll pop a few of these letters off now.

[dx100uk]

not for that purpose sadly.

 

you need to ring the ICO

and tell them what happened when you used this company

 

they'll tell you if they are actually doing anything wrong.

 

don't agree with sending CRA providers a section 10

nor the company concerned.

 

its what the CRA file and the company sign up is there for.

data protection and your protection