GDPR breach?

Lilashes85

Hi, 

Quick question. 

I know companies have a right to pass your information onto a debt collection agency when you're in debt as per your contract...

But, if they pass on your details to a debt collection agency when you do not have any debt, is this a breach of GDPR? As they have no legitimate purpose to pass on personal details and the debt collection agency have no legitimate reason to receive the personal information. Is this a breach? 


Any thoughts welcome 

Thanks in advance 

[Deleted User]

What exactly has happened? And what does their privacy policy state?

Lilashes85

A debt collection agency have been passed my details for a debt I do not have. 
Privacy policy states they can pass on details for debt collection....but if there is no debt, how can you pass on details?

[Deleted User]

Does the DCA believe there is a debt? If not, how do you know they gave your details?

It sounds like it's an admin error, so just focus on that and advise the company that there is no debt.

Savvy_Sue

Just for clarity, is there no debt, or is there a dispute about whether there is a debt, or was a debt written off?