Data Protection Breach?

nezza

I was surprised to receive an email from Credit Karma saying my credit score had gone down.
When I looked at the score in the app, it had plumitted from just under 700 to well under 500!
I knew I hadn't done anything to affect it, that much, so I dug into the TransUnion report and found that the report was flagging a default on an account that wasn't mine.
When I checked, it trasnspires that they have linked a relative's financial and address history to my account.
I can see all the accounts he has that are in arrears, by how much, and his payment history. Also all the addresses he's had linked to these accounts.
Surely this is a serious breach of his data protection rights?
I've checked my credit file with both Experian & Equifax and they (so far) seem to be correct. This seems to only be an issue with Credit Karma/TranUnion.
My relative shares the same surname as me & his middle name is the same a my christian name, but our christian names are different!
We've also both lived at the same address twice, but at completely different times.
Even with these similarities, there's no way they should have linked his information to me and made it so accessible to me?
Is there a case for claiming compensation for this data breach?
Thanks

wannadancewithsomebody

why , how much of YOUR data has been passes to others 

HappyHarry

How much has this error cost you? If you can prove you have lost out financially because of this error, you may be able to claim compensation.

nezza

I was thinking more along the lines of if my relative can claim as it's his information that's been breached.
Also, by allowing his information to become available to me, has TransUnion broken the law & if so, how and to whom should this be reported?

[Deleted User]

You can report to the ICO if you feel the need.

But your relative gets no compensation without a loss.

nezza

OK, thanks.

phillw

nezza said:

Even with these similarities, there's no way they should have linked his information to me and made it so accessible to me?

You can misspell your name on a credit application and it will still show up alongside all your accounts where it's correctly spelled, so having two names where the spelling matches along with periods at the same address is probably not that surprising you could see them.

waamo

GDPR is a rare exception where damages for emotional distress can be claimed. The ICO explains it here https://ico.org.uk/your-data-matters/data-protection-and-journalism/taking-your-case-to-court-and-claiming-compensation/ but it is written into the primary legislation.

The one point to note is that damages are extremely limited, typically about £250 if it goes to court. If they offer a reasonable goodwill payment I would take their hand off.