Article 13 GDPR (Data Protection Act 2018)

Redx

KeithP wrote: »

This thread forums.moneysavingexpert.com/showthread.php?t=5589636 may help you better understand the myparkingcharge fiasco.

In particular, posts #11 and #13 on that thread.

yep, that thread says it all and also says why the dvla took their stance as the IPC told them these notices were not an official NTD and they swallowed it

now that you know that we know all about it and have done for over 18 months, maybe you can take it up where that thread left off, as the OP in that thread didnt take it further , neither has anyone else it seems , although its been discussed a lot on here and on pepipoo too

so prove them wrong and then , and only then , are you correct, because you will have made the wordings I highlighted be correct once more

if the government actually lists what an NTK and an NTD should look like and should contain in the 2019 Parking CoP, and if they then state that only these official notices need to be dealt with and nothing else (which is what came up in the MP committee room discussion last week) ,then this sc@m should die out


have you watched that committee meeting and/or the 02 feb 2018 house of commons debate yet ?


PS:- David Dunford is no longer in charge of that DVLA section, he has moved on , no doubt due to burnout

abedegno

spook104 wrote: »

Actually my example was wrong (I was rushing).

I'm not sure your example would be valid.
Is a decision about the data subject being made? I don't think it is. Automated decisions are not the same as an automated process. You could argue "well a machine is automatically deciding to send me a notice" and yes that is what is happening. Is that machine making a decision about the data subject though, or is it simply match records.

I've still been pursuing this and haven't stopped trying. What I did come across was the guidance notes from the EU here:
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612053

What is interesting, is they give some examples of what constitutes automated decision making - examples which lean more towards automated processing rather than decision making, such as the issuance of speeding tickets from a camera or a mobile contract being cancelled due to late payment.

I've probably collected enough information for a complaint to the ICO about the DVLA.

Computersaysno

abedegno wrote: »

I've probably collected enough information for a complaint to the ICO about the DVLA.

Lol good luck with that!!!


My crystal ball tells me ...it'll be months before you get a reply and it'll basically say...Go away and stop bothering us.

abedegno

Computersaysno wrote: »

Lol good luck with that!!!


My crystal ball tells me ...it'll be months before you get a reply and it'll basically say...Go away and stop bothering us.

On top of the dozen or so complaints I have outstanding with the ICO about various other organisations - you're probably right

abedegno

Rather excitingly the ICO have published a new PDF complaints form:
https://ico.org.uk/media/report-a-concern/forms/2259547/personal-information-complaints-form-new-final-2307.pdf

System

Rather excitingly the ICO have published a new PDF complaints form

I must be a sad git as I found that exciting.....

Anyway how about an annual event celebrating the DVLA's willingness to pass out personal data to all and sundry. We could call it #RogerToftDay or even #PatrickTroyDay.

About a month before, Keepers throughout the UK ask the DVLA for a list of parking companies that accessed their data. Then on say 25th May or 1st April (#RogerToftDay) everyone sends out a SAR to the parking companies that were on the DVLA reply plus a few more just in case they have the data but didn't ask the DVLA.

So 6mn SAR's on one day would make a nice SAR bomb.

Happy #RogerToftDay to all when it comes,

Umkomaas

#RogerToftDay

Or even Robert Toft.

Poor guy, being unceremoniously Rogered on a public forum! Ouch

spook104

After giving the PPC the required time to complete the SAR and the erasure request I complained to the ICO. I got a response today saying they have given the PPC 14 days to complete my SAR correctly and then to erase my data.

Coupon-mad

Good stuff, more people need to do that!

Did you just email the ICO online and send them copies?

spook104

Coupon-mad wrote: »

Good stuff, more people need to do that!

Did you just email the ICO online and send them copies?

A couple of posts up there was talk of a new online pdf form, but when I done it there was a word form to download and complete. I sent that via email with copies of emails between myself and PPC up until that point and then waited for a response.

Nothing overly complicated and people should absolutely be doing this more.