Compensation for Data Protection Breach?

crazyguy

1ManArmy wrote: »

I was under the impression that named drivers could discuss a policy but have no powers effecting one. For e.g. they can find out the price of the next quote but not take it on behalf of the main driver.

My ex partners insurance policy was in her name only but I used to organise it without being on the policy itself I was merely named on the account as such, they did need her permission first time round, but for about 4-5 years I looked and organised the actual renewal.

Bangton

wee_plumb wrote: »

Yep, totally understand what you're saying. I don't dispute or disagree with my boyfriend having access to discuss the policy he is named on. I do, however, when it's regarding information from yonks ago.

In my view I have had 5 different policies with this insurer over the years. They discussed named drivers on a policy I had two cars ago.

It's been inconvenient for me and did cause some issues. I'm just surprised that this is seen as acceptable.

I'm not sure why they need to discuss drivers 2 cars ago to be fair but they will probably explain why...I just wouldn't be too disappointed if you get a letter of apology/explanation and not much else (bearing in mind the terms and conditions). Good luck either way!

Spiderham

crazyguy wrote: »

Raskazz,

I will have to disagree with you on this one, as if a company has your details and not used them in anyway you still have a right to ask for complete removal/suppression on the company's database regardless of any breach.

I am not sure how you would know they had your details, but never the less you can act on the above.

Sounds a bit catch 22 that.

"You cannot know if we have your details and then ask us to delete them as then we would have used them"

On that point though if they are unused, they could be deemed irrelevant and unrequired (hence potentially excessive) which hits raskazz's point.

On OP's point, it does seem somewhat out of order and unnecessary, I'd expect some goodwill gesture and apology will be forthcoming to help avoid bad PR.

Dynamic_Panda

Unless you have given permission either in writing or speaking to the insurer at the same time as your partner made the call then they should not have disclosed any info about your policy whether it was a breach of DPA or not...............

The DPA covers personal information held about yourself as the policy holder and also personal information about others on the policy.............such as age, DOB and address but not necessarily names as they were obviously trying to identify them............

DP

raskazz

crazyguy wrote: »

Raskazz,

I will have to disagree with you on this one, as if a company has your details and not used them in anyway you still have a right to ask for complete removal/suppression on the company's database regardless of any breach.

But "not used in any way" is not specific and it is very rare for details on an insurance company's database (or indeeed any company's database) to not be used "in any way".

Eg if you have a policy in 2001 and it lapses in 2002 the insurer still has good reasons to still retain the data today, namely:

1) For use in statistical analysis of underwriting trends and loss ratios
2) In case a late claim is submitted (for example if a minor is injured due to negiligence then the limitation period for a claim only begins when they reach majority i.e. 18 years of age)
3) For us in statistical analysis of trends in marketing techniques and efficiency