SAR Request's

bert&ernie wrote: »

Which links? The ones above seem to show de-personalised standard correspondence.

I thought you were going to ignore me anyway. I'm flattered that you think I'm the weirdo btw.

N-i-D_-_SAR_Template wrote:

Date

Dear Sirs,

SUBJECT ACCESS REQUEST (SAR) UNDER DATA PROTECTION ACT 1998

Please send me all data that your company holds relating to me, my address or person. This is to include details of every company, individual and organisation with whom you have shared data about me for the last 6 years, also including my current most up-to-date credit report (if applicable).

Where you have shared data about me with other parties, I require that you supply me with true copies of documents that show that you have done so in a lawful manner and with my written & signed consent. Where your company holds and processes data for purposes of my credit file & credit report, I require that you provide documents to show that the data held is current, accurate and relevant.

Under the terms of the Data Protection Act 1998, you are obliged to send all data that you hold on file for the past 6 years. However, if you hold data beyond 6 years, under the above act, you must supply it on demand. If you no longer hold data beyond 6 years, I would like a signed declaration from your data controller and a copy of all documents pertaining to its proper disposal.

All data, including data held on microfiche or other such storage systems must be provided within a reasonable timescale, a maximum of 40 days is allowed in line with the ICO guidelines and I do expect your response within this timeframe. I enclose the statutory fee of £10.

For reference, my previous addresses spanning back the 6 years are as follows:

I look forward to your imminent response, with the data requested.



Yours faithfully,




[FONT=&quot]Sign Electronically[/FONT]

bert&ernie wrote: »

What is the issue with supplying the signature that callcredit are demanding? I don't understand why you cant just sign the letter. Wouldn't this allow you to demonstrate that they are breaching their own rules by supplying the data to third parties without undertaking the same due diligence with regard to subject consent?

bert&ernie wrote: »

I think you are both being rather obstinate about the signature. I agree that Callcredit don't need it, but you don't really have anything to lose other than a little biro ink. Although "you dont have to", it is customary sign ones letters.

NB I do understand the logic in not signing letters to DCAs, who might be tempted to copy said signature onto previously non-existent CCAs;)

It seems that you have reached an impasse that will likely only be resolved if you back down of the ICO intervenes in your favour. This may be whay you are looking for, but I dont really see what you would gain even if the ICO backs your view - you will be no further on than if you had simply signed the letter.

How about getting someone else to sign the letter - they don't actually say it has to be you! And, as you said yourself - what would they have to compare it to?