cifas query on DSAR for company that placed marker

Tonyafc90

Hello all,
I just had question in regards to cifas markers. So if a company places a cifas marker under your name (in this situation its with o2), and you do a DSAR to o2, shouldnt there be some mention of that cifas marker there on the response?    

because essentially o2 have done exactly that. They sent me a response with a couple of PDF docs, and it just had generic information but no mention of anything related to cifas or anything dodgy. The response was pretty much an application form type of layout rather than having text written "Mr ---- has done something dodgy" so it didnt provide any info at all really. 

As DSAR are things that are meant to contain every bit of data that the company holds about the individual, so I thought that meant they would have to document the marker? or am i wrong?


kind regards & much appreciated to all that looks

eskbanker

While you're correct that there should be full disclosure of all personal data when responding to DSARs, it doesn't do any harm to be specific about what you're looking for when submitting them in the first place, or indeed when you've received what appears to be an incomplete response.  Apart from anything else, a vague 'send me all my data' request to a phone company could be interpreted as details of every call made, every bill, etc, which runs the risk of being deemed as excessive, so it would generally be more productive to be as specific as possible about what you're actually looking for.

I'd suggest reverting to them along the lines of 'please supply all data pertaining to reporting to CIFAS on [approximate or exact date], including the full circumstances leading to this action' and see what that brings.

If the codified data they supply isn't in intelligible form then ask them to explain it, which they're obliged to do.

https://ico.org.uk/your-data-matters/your-right-to-get-copies-of-your-data/, and the pages linked from it, explains the above in more detail....