Mortgage Application - Paperwork via Email? Security Impact...

Wolfsbane2k

Hi.

I'm currently going through a mortgage application and am astounded that the Broker ( a very, very large one) i'm using sends out paperwork via email that includes every single bit of my financial history, and then asks for copys of stuff like P60s, Bank Statements to be posted back to them via return email.

If one of these emails got into the wrong hands, and considering that the email path can go through anywhere in the world, this seems absolutely bonkers.

Is it me, or does anyone else think this isn't right and should be refered to the ICO for Data Protection leakage?

I have informed them to stop sending me anything via email and to provide a encrypted, secure password protected website for me to use, but they replied with yet more personal information..

Is anyone else using email to provide this type of information to Brokers/Mortgage companies at the moment?

Ta!

Paully232000

I provided my mortgage broker all the information you discuss via email and was quite happy to do so. Much better than posting, or me having to go in with the documents.

I believe that email is as secure as other modes of data transfer (post, fax), apart from me physically going into the office with the documents, if they don't have the facility of a secure website that you ask for.

If you are not happy why cant you choose another broker who does not ask for things by email. You could go to the ICO if you wanted.

princeofpounds

The boys at GCHQ will be ordering all sorts of tat from the lakeland catalogue using your identity...

Wolfsbane2k

princeofpounds wrote: »

The boys at GCHQ will be ordering all sorts of tat from the lakeland catalogue using your identity...

I have no problem with GCHQ having a copy of the form, they already have a lot more

It's the other, unknown unknowns that worry me!

Wolfsbane2k

Paully232000 wrote: »

I provided my mortgage broker all the information you discuss via email and was quite happy to do so. Much better than posting, or me having to go in with the documents.

I believe that email is as secure as other modes of data transfer (post, fax), apart from me physically going into the office with the documents, if they don't have the facility of a secure website that you ask for.

If you are not happy why cant you choose another broker who does not ask for things by email. You could go to the ICO if you wanted.

Post is more secure that people think - You can normally identify if it has been tampered with, and it would take a lot of effort to scan each piece of mail, and it would be illegal. Email comes in a quick, machine readable form already, therefore searchable quickly, and it's also not illegal to read email if it goes over your email server...

The issue I really have is the broker does provide an attempt at a Secure Service, but the server is way below the latest Secure patch level and the certification path fails.

They are also breaking their own Data Policy while sending this stuff out via email...

k3lvc

Wolfsbane2k wrote: »

The issue I really have is the broker does provide an attempt at a Secure Service, but the server is way below the latest Secure patch level and the certification path fails.

They are also breaking their own Data Policy while sending this stuff out via email...

Simples then - don't use them and find someone who'll do it as you want

Wolfsbane2k

k3lvc wrote: »

Simples then - don't use them and find someone who'll do it as you want

That's where i'm sat, but i've already paid a good chunk of the mortgage application fee and if i swap brokers think i'll need to pay that again

k3lvc

In which case if you chose them because of the 'secure' services they offered then ask them for a refund and shop elsewhere. If you didn't and it wasn't a condition of your agreement then bear it in mind for next time

EatTheRitch

Paully232000 wrote: »

I believe that email is as secure as other modes of data transfer (post, fax),

:rotfl::rotfl::rotfl:

Is it me, or does anyone else think this isn't right and should be refered to the ICO for Data Protection leakage?

Escalate your complaint with the broker first. Ask to speak to their "Data Protection Officer" if they have one. If they are registered with the ICO (a legal requirement) this is normally the title of person the company appoints to deal with such issues.

Although sluggish in my experience, the ICO will take a dim view of your brokers actions.

The Data Protection Acts are your (and my) friend.
It's a shame so few people (including some jokers on this thread) realise what they can do for them, as well as the dangers posed by poor information management.

McBozo

there is nothing that a DPO will do. As there has been no breach.

Email is more secure than royal mail and fax.

Regards,
Neil.

beeg0d

McBozo wrote: »

there is nothing that a DPO will do. As there has been no breach.

Email is more secure than royal mail and fax.

Regards,
Neil.

lol you are kidding arnt you? email travels in plain text through many many many servers before reaching the end user. every one of those servers it would be possiable for someone to view what is sent