Aqua/Hoist

stonesy

Should I raise a complaint based on the 4th Principle of the DPA, in that they cannot provide any data therefore bringing into question the accuracy of the data they are reporting to CRA? Moreover they cannot surely satisfy CCA compliance given there's no evidence of a default notice ever having been sent?

fatbelly

You can try a complaint to the ICO.

Let us know how you get on.

stonesy

Well I finally received a SAR from Newday!

The only problem is, it had my address and name on the envelope but the covering letter had my address with another persons name on it! oh and all THEIR account information! whoops, so I now have someone else's SAR with account information, default, address and phone numbers!

So Mondays phone call should be interesting, I'll be raising some concerns as to where my data has ended up - do we think this will give me a silver bullet to sway them to remove this default, or off to ICO/newspapers I go...

stonesy

OK so I have some updates,

Aqua have come back and apologised for their blunder, offering to reimburse me to send the SARicon back to them - I've reiterated that I would like the default removing as a gesture of good will, which they once refused already - but have now gone away to reconsider given the above. However I've also now received my SAR.

The default notice I believe could be invalid, it states I have to pay by the above dated DD/MM/YYYY, but then the last paragraph states that I must remedy the breach within 28 days of the date of the letter. So there's two entirely different dates by which to remedy, would this be sufficient to get the default removed?