Ppc send SAR for wrong person

Cornwall2000

KeithP wrote: »

"Independent Parking Community"?

What are they talking about?

Haha IPC is actually "International Parking Community". Judging by the highly patronising response I doubt they would respond well to such a query.

I'll wait for response from ICO and the KADOE DVLA email address I think.

Did get an email from Armtrac

Armtrac wrote:

Dear Sir ,
We have been made aware that you have been in contact with the gentleman who’s data you received . We would request that you destroy/delete his data from your files. We would once again like to confirm that none of your data has been breached. We have done a full investigation and have reported it to the ICO.

I suggested they delete the info themselves as they were the ones sending it to the wrong people. Not me.

waamo

Call me cynical but I suspect the final sentence in that letter is [STRIKE]a whopping lie[/STRIKE] not entirely correct.

Umkomaas

waamo wrote: »

Call me cynical but I suspect the final sentence in that letter is [STRIKE]a whopping lie[/STRIKE] not entirely correct.

Something I think the OP would be entitled to check the veracity of directly with the ICO. That could elicit an interesting response.

Fruitcake

Cornwall2000 wrote: »

I think this is a response to filling in the online complaint form on DVLA website.

Even putting aside the incorrect name of the IPC, this is utter cobblers.

A KADOE Contract breach has occurred and needs investigating by the relevant department within the DVLA.

This is the KADOE contract proforma, so I suggest you have a look at the parts breached and let the DVLA know, as they don't seem to be able to understand it themselves.

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/455973/Annex_A_-_KADOE_Fee_Paying_Contract_V4.pdf

For example, the data has not been used for the purpose it was requested, so that's a section B2 breach.

The correspondence between the PPC and data subject does not comply with the law (DPA/GDPR breach) which is a breach of section C1.1.

When a data breach occurs, the PPC must tell the DVLA. If they don't then a section D10 breach occurs.

Umkomaas

^^ agree ^^

Seems a general fob-off line from possibly someone who seems unable to put in the effort to understand/have detailed knowledge of the full picture. No doubt they'll have a better understanding of their smoking break entitlements and their indexed-linked pension rates!

Computersaysno

That's excellent news...


Slap the scummy scum wonkers for a minimum of £250 each....I'd be tempted to try for circa £1000.


Easy as pie in small claims....

Cornwall2000

---

Forwarded message

---

From: Keeper At Date Of Event <KADOEservice.support@dvla.gov.uk>
Date: Fri, 24 Jan 2020 at 12:14
Subject: DVLA Official Sensitvie - XXXXX **Official Sensitive**
To: XXXXX@gmail.com <XXXXX@gmail.com>


Dear Mr XXXXXX,

Thank you for informing the DVLA that you had received someone else’s personal data from KBT Cornwall who trade as, Amtrac Security Services.

I can confirm that DVLA are acting on this information and it is currently under investigation.

I am unable to provide you with any further information than this, as it was not your personal data that was affected.

Kind regards

XXXXX

Compliance Officer

Data Sharing Strategy & Compliance

Strategy, Policy & Communications Directorate | C2 East | DVLA | Swansea | SA99 1DY

Castle

If that's your surname in post 28 you may want to redact it.

Cornwall2000

Castle wrote: »

If that's your surname in post 28 you may want to redact it.

Thanks. missed that one

Cornwall2000

I have chased up complaint I made to the ICO via their website. I was informed (by the "Live Chat") that cases were currently taking 3 months to be assigned to a case officer due to "a backlog".