Data Protection for phonecalls from bank?

rapunzelz86

Just got a call from hsbc re my account. She says "hello, can i speak to miss xxxx"
I say "speaking"
Then she goes on to inform me of a list of transactions on my account and enquires if they are my transactions etc.
Shocked, i asked why she felt there was no need to confirm any details with me for Data Protection. Told her that i could have been anyone! She says so long as she is "comfortable that its me" then she doesnt have to. Is this correct? if it is then im disgusted! What if i had moved and not changed my number, and she was telling someone who had moved into my address all my personal banking info?!
I cant for the life of me believe that this is true, and if its not, what can i do about this lack of security?

Olipro

if you had moved, they would expect you to be somewhat diligent about changing your number, however, with that in mind, perhaps you might like to get them to call you on your mobile phone in that case.

and let's just say it wasn't you, and she's just given these transaction details... what could a a nefarious third party do with the information? !!!!!! all unless it was embarassing information they could blackmail you with.

Lokolo

I have been phoned by HSBC on numerous occasions and never had this. They have always wanted information about myself (such as name DOB etc.) and in return, they will list transactions on my account so I know it was HSBC calling and not a scammer.

Given the list of transactions on your account is not going against Data Protection Act.

masonic

I've had this before (not with HSBC, but the wonderful A&L ) and not been asked any security questions. I know that for sure, because if I had I would have refused to answer them because I couldn't be sure it was really the bank calling.

rapunzelz86

I dont think that is the point, the information she gave me. Seeing as she was happy it was me because i said so, i could have gone on to request she set up a standing order or an instant payment to another account.If it had not been me, i could have had all my money taken. Working in call centres befor eive always had to do security checks d.o.b address etc so i dont see why banks are above this law.

Olipro

sadeelisha wrote: »

I dont think that is the point, the information she gave me. Seeing as she was happy it was me because i said so, i could have gone on to request she set up a standing order or an instant payment to another account.If it had not been me, i could have had all my money taken. Working in call centres befor eive always had to do security checks d.o.b address etc so i dont see why banks are above this law.

next time they call you, try it and see if they let you, I'll bet they won't.

HouseHuntr

sadeelisha wrote: »

Just got a call from hsbc re my account. She says "hello, can i speak to miss xxxx"
I say "speaking"
Then she goes on to inform me of a list of transactions on my account and enquires if they are my transactions etc.
Shocked, i asked why she felt there was no need to confirm any details with me for Data Protection. Told her that i could have been anyone! She says so long as she is "comfortable that its me" then she doesnt have to. Is this correct? if it is then im disgusted! What if i had moved and not changed my number, and she was telling someone who had moved into my address all my personal banking info?!
I cant for the life of me believe that this is true, and if its not, what can i do about this lack of security?

So if the postman knocked your door and asked ;- are you Miss/Ms/Mrs/Mr Sad and said I have letters from x,y,z bank for you and bills from this and that company would you think data protection lapes have taken place and that knowledge could be detremental to you because he/she didn't ask you to prove your ID ?

Joe_Bloggs

If someone phones you up claiming to represent someone and asking for personal information or spouting banking transactions, then there is a possibility that it could be for fraudulent purposes. For all you know the caller has intercepted your bank statement and is trying to lull you into a false sense of security.

Unfortunately many legitimate bank callers do this. What is required is some form of unique password/ number from the bank rather than just accepting that the person on the line is who they say they are.

A sophisticated telephone fraud is mentioned here. In it is is suggested that if doubts exist as to the nature of the call then visit a local branch.
J_B.

masonic

sadeelisha wrote: »

I dont think that is the point, the information she gave me. Seeing as she was happy it was me because i said so, i could have gone on to request she set up a standing order or an instant payment to another account.If it had not been me, i could have had all my money taken. Working in call centres befor eive always had to do security checks d.o.b address etc so i dont see why banks are above this law.

The point you are missing is, that if somebody phones you claiming to be from your bank and asks you some security questions, then you should hang up the phone. As Joe_Bloggs suggests, unless you have set up a password system in advance, it is not possible for the bank to verify your identity securely when they phone you (because you should never give out security information to an unknown caller).

Equaliser123

HouseHuntr wrote: »

So if the postman knocked your door and asked ;- are you Miss/Ms/Mrs/Mr Sad and said I have letters from x,y,z bank for you and bills from this and that company would you think data protection lapes have taken place and that knowledge could be detremental to you because he/she didn't ask you to prove your ID ?

Clearly, the postman has a duty to deliver mail to the address. Neither a) would he enquire as you suggest; or b) would there be a data protection "lapes" (assume you mean "lapse") as there would be no disclosure of personal data.

fozzeh

I can tell you that this is poor from HSBC and a DPA breach. The guys in our call centre ask 4 questions minimum to verify security.
I would raise this with the manager of your branch. Also, as a precaution, set a mandatory password on your account. I have one which is 16 figures long which I get asked for every time now and I like it that way.