First Direct - new customer query

DullGreyGuy

Nasqueron said:

boingy said:

Largs said:

 How long are they holding on to my details??????

Pretty much forever. All banks do. Nationwide still have my account application form from over 35 years ago.

If you are a current customer, they have no reason to get rid of old data, the 6 year rule doesn't kick in until you are a former customer and even then, in the digital age, if they want to store data for longer they can 

Not under GDPR they cannot... however, it's not too hard to come up with a business justification to retain data and as long as their advertised policies include it then its most likely ok. 


Was denied a switching bonus with FD because I had an ISA with them over a decade previously... that said, with the experience of trying to open an account with them I would say it was a lucky escape. 

boingy

I had a gap of more than a decade with Santander where I was not a customer and they still retained my original data, so much so that the contact details on my brand new account had a mixture of my current address but with a phone number from a house I have not lived in for fifteen years and an email address I had not used for at least ten years. I've had similar with other banks and BS's too. It seems they hold data forever, regardless of whether you are still a customer.

Nasqueron

DullGreyGuy said:

Nasqueron said:

boingy said:

Largs said:

 How long are they holding on to my details??????

Pretty much forever. All banks do. Nationwide still have my account application form from over 35 years ago.

If you are a current customer, they have no reason to get rid of old data, the 6 year rule doesn't kick in until you are a former customer and even then, in the digital age, if they want to store data for longer they can 

Not under GDPR they cannot... however, it's not too hard to come up with a business justification to retain data and as long as their advertised policies include it then its most likely ok. 


Was denied a switching bonus with FD because I had an ISA with them over a decade previously... that said, with the experience of trying to open an account with them I would say it was a lucky escape. 

They absolutely can retain your data longer than 6 years if there is a business justification for it, the ICO makes this very clear 

The UK GDPR does not dictate how long you should keep personal data. It is up to you to justify this, based on your purposes for processing. You are in the best position to judge how long you need it.
You must also be able to justify why you need to keep personal data in a form that permits identification of individuals. If you do not need to identify individuals, you should anonymise the data so that identification is no longer possible.
For example:

• You should consider your stated purposes for processing the personal data. You can keep it as long as one of those purposes still applies, but you should not keep data indefinitely ‘just in case’, or if there is only a small possibility that you will use it.

Example

A bank holds personal data about its customers. This includes details of each customer’s address, date of birth and mother’s maiden name. The bank uses this information as part of its security procedures. It is appropriate for the bank to retain this data for as long as the customer has an account with the bank. Even after the account has been closed, the bank may need to continue holding some of this information for legal or operational reasons for a further set time.

...

• You should consider whether you need to keep a record of a relationship with the individual once that relationship ends. You may not need to delete all personal data when the relationship ends. You may need to keep some information so that you can confirm that the relationship existed – and that it has ended – as well as some of its details.

Example

A business may need to keep some personal data about a previous customer so that they can deal with any complaints the customer might make about the services they provided.