GDPR anyone?

tenchy

nic_c wrote: »

No one will shut down because of this! Seems like you don't have an understanding of the scope of it.

For most small clubs etc they only keep your data for the purposes of a membership list and maybe to send newsletters, they just simply need to reconfirm this use. So long as they are not selling the data on or using it for some other purpose that they haven't made clear, then no change. Its the same from when the DPA came in, people said the same then. Though I suppose if anyone is still keeping lists offline and were not effected by DPA, they will be for GDPR. :rotfl:

This is all about analysing what data you store on people, and where it's used, and what for, and ensuring you have informed the customer specifically for these uses rather than some generalised catch all..

I'd say justifying rather than analysing. GDPR won't affect the likes of small clubs to any great extent. On the other hand, it could have significant effects on the way the CRAs operate, but these bodies have been lobbying hard to minimise the adverse effects from their point of view. We will have to wait and see how the banks now deal with CATO in terms of their relationship with the CRAs. Other interesting areas include the historic address rentention carried out by CRAs and the handling, or actually the mishandling, of financial associations.

[Deleted User]

tenchy wrote: »

No. Couldn't find anything about T&Cs in that document.


It does seem a difficult one to get across, but for the supply of water there are no T&Cs; definitely not. You agree to nothing. They are obliged to supply you, and you are obliged to pay. That's it. Regarding their use of credit reference agencies, they proceed without your consent.

Indeed - my water company have taken my name from my landlord and then given me either a blank date of birth, or it's defaulted to unix epoch time/date as it's showing my 'agreement' with a DOB of 1/1/1970!

I don't particularly care as I'm up to date so it's positive data, but if I wasn't (or if the 'fake' DOB flags up in other applications!) I wouldn't be so carefree!!

molerat

Just had my 3 sides of A4 from Santander. IMO this is just going to be a ball ache for data controllers with the man in the street seeing little change.

PixelPound

Since DSARs will be free, I wonder if doing them on the SRA's will get you a stat report or maybe it would be useful for finding what other information they hold on you...

Uxb

nic_c wrote: »

No one will shut down because of this! Seems like you don't have an understanding of the scope of it.

Well
The 'Which' email service is closing the day before GDPR comes into force with GDPR being quoted as one of the reasons.

The broadband router-stats uploading hobby site (MyDSLwebstats) where people upload their broadband line technical stats into the public domain for other to compare and comment etc has closed with cost, time and GDPR being quoted as a factor.

so there are two examples and I'm sure there will be more.

On the opposite side of the coin.
I was asked at a recent social club type AGM as I'm treasurer what steps I'm taking to become GDPR complaint - my reply was blunt - I'm ignoring it and I don't care.

Faintlol

Maybe I've missed this throughout the comments so apologies if so.

But what is the difference between a SAR and asking for a copy of my credit report from any of the CRAs? Reading between the lines Im better of waiting until 25th May and getting my report/SAR for free instead of paying 6 quid?

tenchy

Faintlol wrote: »

Maybe I've missed this throughout the comments so apologies if so.

But what is the difference between a SAR and asking for a copy of my credit report from any of the CRAs? Reading between the lines Im better of waiting until 25th May and getting my report/SAR for free instead of paying 6 quid?

CRAs hold much more data about you than appears on your credit report. So go for the SAR to find out exactly what they've got.


Here's an example of something that's just come to light for me. Credit reports are not linked to people at the same address. In other words, credit reports are 'per person' not 'per address'. However, I've just found out that at least one CRA keeps some data in your record (not necessarily your credit record) of all the people who live at your address. Why would they do this, I wonder? You won't see this in a credit report, but a SAR might show it. Okay, so you already know who lives at your address, but of course the CRAs may have erroneous data.

Faintlol

Thanks will wait until 25th then and request SAR! Just wanted to check I wasn't missing anything by going for the SAR.