DP breech by Student Letting Agency

[AnotherLegend]

Did Glide state in their SAR response the basis upon which they are processing your daughter's personal data? If not, you can go back to them and push them on this. They will need to be very careful with their response because they do not have her consent.

 

I would also raise a complaint to Glide about the fact that your daughter told them she was not going to use their services and yet they still continued to try and provide a service. You should also speak to the Energy Ombudsman (https://www.ombudsman-services.org/sectors/energy) and see what they advise to do.

 

When the LA responds, you will need to carefully review their response. They will need to show that they had your daughter's permission to transfer her personal data to Glide. If they are unable to show this, then your daughter should be able to seek compensation for distress under the new DPA. There is a good blog about this here - https://www.mindmydata.co.uk

 

There is also one final question - if the LA unlawfully provided your daughter's personal data to Glide, does that mean that Glide are equally responsible as the LA? Glide do have a legitimate interest to process personal data, but the question is more about how they acquire that data in the first place (even if they believed it was done with your daughter's consent).

[yourturntopay]

Did Glide state in their SAR response the basis upon which they are processing your daughter's personal data? If not, you can go back to them and push them on this. They will need to be very careful with their response because they do not have her consent.

Glide stated that the LA had sent her personal information in the form of a spreadsheet via an email. This is the email we have been trying to get Glide to provide as the spreadsheet does not contain any indication that her consent had been sought or given. We want to know if the email from the LA says anything about consent

 

 

I would also raise a complaint to Glide about the fact that your daughter told them she was not going to use their services and yet they still continued to try and provide a service. You should also speak to the Energy Ombudsman (https://www.ombudsman-services.org/sectors/energy) and see what they advise to do.

We have raised a formal complaint with Glide about the charges and asked them to explain why. They are ignoring her emails and have not given any explanation as of yet.

 

When the LA responds, you will need to carefully review their response. They will need to show that they had your daughter's permission to transfer her personal data to Glide. If they are unable to show this, then your daughter should be able to seek compensation for distress under the new DPA. There is a good blog about this here - https://www.mindmydata.co.uk

 

This is what we really want to see. They have previously admitted that they did not have all the correct paperwork for my daughter and the forms that they should have sent her to complete were about sharing info with Glide and Virgin. They realised the day before the tenancy they did not have this signed and completed paperwork from my daughter as they had sent all of the forms to an incorrect email address (their error) and had not chased its return or resent the forms when they realised they had sent the firms to an incorrect email address. She was in Thailand at the time and could not complete them so asked me to do so on her behalf. That’s when we realised her LA had passed on info without seeking her consent.

 

There is also one final question - if the LA unlawfully provided your daughter's personal data to Glide, does that mean that Glide are equally responsible as the LA? Glide do have a legitimate interest to process personal data, but the question is more about how they acquire that data in the first place (even if they believed it was done with your daughter's consent)

It will be interesting to see if there are any discrepancies when we compare the paperwork Glide sent with that of the LA .