GDPR Breach. How much compensation?

davidmcn

wesleyad said:

I'm not sure name and address even crosses the threshold? Surely it's public information. Anything that is on the outside of a letter cannot be considered private information. Nor anything I can get from the land registry etc. For it to be a serious breach there need to either be financial info, personal info that cannot be ascertained elsewhere (such as race, religion, sexual preference) or a reason why common info (such as name and address) shouldn't be divulged (eg abusive ex spouse etc)

The fact that the "well known UK body" even had the OP on their records might in itself be sensitive information.

chelmers

Hi, I've had an letter from CARS, who asked my to confirm my date of birth as part of the security process. As this was not shown on the letter and i have no 'relationship' or knowledge of this company i refused, and they refused to discuss said letter.
So appears my personal details have been passed to this company, and reading the comments on this forum I am not exactly filled with joy about dealing with them.  
Any comments welcome!
Thanks,
Neil

hollydays

chelmers said:

Hi, I've had an letter from CARS, who asked my to confirm my date of birth as part of the security process. As this was not shown on the letter and i have no 'relationship' or knowledge of this company i refused, and they refused to discuss said letter.
So appears my personal details have been passed to this company, and reading the comments on this forum I am not exactly filled with joy about dealing with them.  
Any comments welcome!
Thanks,
Neil

The usual advice is, please start your own thread🙂

waamo

chelmers said:

Hi, I've had an letter from CARS, who asked my to confirm my date of birth as part of the security process. As this was not shown on the letter and i have no 'relationship' or knowledge of this company i refused, and they refused to discuss said letter.
So appears my personal details have been passed to this company, and reading the comments on this forum I am not exactly filled with joy about dealing with them.  
Any comments welcome!
Thanks,
Neil

I'm amazed that a motor vehicle can ask for any information. Was this Bumblebee by any chance?

moneysavinghero

I know, too late to be of any use to the OP, but i provide this information in case any else finds this post.

Everyone that is saying you need to prove quantifiable losses is incorrect. Article 82 of GDPR gives a specific right to compensation.

Article 82(1) states:

Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.

Non material damage includes stress caused. The OP is clearly in ongoing stress as they are worried that they may become a victim of fraud at some unknown point in the future.

I merely got a marketing text message that i had not consented to, so no leak of personal data as suffered by the OP. Tried my luck and and got £500 no quibble. So OP should have got more than £150. I think there is a similar case to the OP's where a judge awarded £750.