Data Protection Act

alf0001

Hi, I recently sent a message to a mobile phone company through their secure web site and I had to give them my security details, etc, so they could make sure I am who I say I am. Fine, makes sense. I was a little annoyed then, when they proceeded to reply to my enquiry via my email address, adding all the security information to their reply. Do you think they have broken the data protection act? Thanks.

alf0001

Can anyone answer my question?

Jon_01

The DPA says that they can't give anyone else your personal information. If they're sending to an email address which you have supplied them through a secure website then they aren't breaking DPA as they're just sending you, your own details...

alf0001

Thanks, Just to reiterate, I sent my identification details via their secure means and they sent exactly the same data back to me, via unsecure means, i.e. email. How can this then not break the DPA?

Jon_01

Presumably they sent the info to an email address which you give them after you’d cleared their security. They then returned the details to that address, so only you could have given them that address.
The DPA only states that they cannot give your personal information to any unauthorised third party. If they are replying to an address given to them by you they’re not sharing that info with anyone else, therefore no breach of the DPA.

alf0001

Ok, maybe I used the wrong "Act", what's the one that applies when a company compromises your security through incompetence?

Fork86

alf0001 wrote: »

Ok, maybe I used the wrong "Act", what's the one that applies when a company compromises your security through incompetence?

What is it that you aim to do if they did contravene this act?

LeeSouthEast

To the best of your knowledge, your security has not been compromised. Potential to have been, yes, but no apparent evidence it has been.

Jon_01

I really can't see how you feel they've compromised your info?

If your saying that your email isn't secure, then why did you give then that address in the first place?

alf0001

Fork86 wrote: »

What is it that you aim to do if they did contravene this act?

Tell them.

alf0001

Jon_01 wrote: »

I really can't see how you feel they've compromised your info?

If your saying that your email isn't secure, then why did you give then that address in the first place?

I didn't think they'd be stupid enough to send the info back to me. Why do you think Banks don't email your password / security information to you? .... because non-encrypted email is not secure.