Orange Giving Information To 3rd Parties - Can I Cancel?

davemorton

Dont know about Orange, but I know with at least 1 of the big four, you can just text them for your renewal date. No security needed for that.

Biggles_266

I've spoken to Orange and the 3rd party and now have some more info.

3rd party actually broke my phone and emailed orange to ask if they could buy a replacement for me. Orange called them back and tried to confirm who they were, realised they weren't me and said they couldn't help. This was a uk call centre. Shortly afterwards an Indian Orange call centre phoned and told 3rd party that they (meaning me) were elligible for an upgrade. This wasn't the case as it was a different account that was due an upgrade. This was data breach number 1.

3rd party then said they weren't the account holder. They were then asked for their name and Indian Orange agent looked them up within their system and found them because 3rd party was a previous customer with their own account completely unconnected to me. Orange then asked for 3rd party's password. 3rd party said they didn't have a password for my account and Orange insisted they did (reading the password from 3rd party's account). 3rd party then gave a password (this being different from what actually was set by me) and at this point Orange added 3rd party to my account (which is why they now appear as having access when I login to my account online). Data breach number 2.

Data breach number 3 is that when Orange were busy giving access to my account to 3rd party, they went and set the email address to that of a 4th party! This wasn't just a typo - entirely different name. No idea where it came from.

The final error is that 3rd party have read access to the account (shouldn't but neither here nor there) yet still were able to change tariff.

It's been a farce but not sure if I can get anything out of it.

spiro

Write a letter addressed to their 'Data Controller', this is the person responsible for DPA.

Jon_01

Orange are moving more and more area's out to off shore call centers. Because, they say, they're just as good as the UK one (and clearly cost them a lot less). You can draw your own conclusion on that idea. . .

Get on to the Exec office, lodge a formal complaint under the Data Protection Act, tell them if they don't respond within 14 days you'll take the matter up with the Information Commissioner’s Office.

Orange Executive Office
St James Court
Bristol
BS32 4QJ

Email: executive.office@orange.co.uk

Information Commissioner’s Office.
http://www.ico.gov.uk/

grumbler

I think all the above was mainly about breaches in a basic security, not just about data protection.

Jon_01

grumbler wrote: »

I think all the above was mainly about breaches in a basic security, not just about data protection.

Indeed, but the agent has clearly breached PDA by giving an unauthorized third party access to the acc and then allowing them to make changes.
This breaches Oranges internal rules on how to handle third party access (never mind the DPA) and would never have happened if the call had gone to a UK call center (or I'd like to think that any way!).

The op should raise hell with the Exec office so they're aware of just how bad these off shore CC are. . .