Your browser isn't supported
It looks like you're using an old web browser. To get the most out of the site and to ensure guides display correctly, we suggest upgrading your browser now. Download the latest:

Welcome to the MSE Forums

We're home to a fantastic community of MoneySavers but anyone can post. Please exercise caution & report spam, illegal, offensive or libellous posts/messages: click "report" or email forumteam@.

Search
  • FIRST POST
    • davidgmmafan
    • By davidgmmafan 11th Jul 19, 1:03 AM
    • 1,449Posts
    • 522Thanks
    davidgmmafan
    GDPR and former HSBC customer
    • #1
    • 11th Jul 19, 1:03 AM
    GDPR and former HSBC customer 11th Jul 19 at 1:03 AM
    Hi,


    I applied a while ago to take advantage of a HSBC switching incentive. After some confusion because I'd had an account before and a lot of wasted time they ultimately wrote to me to say as their records showed I'd had money written off, and they have a policy of not offering current accounts to people who have had a balance owing to them written off they had declined the applciation.


    Now it's not a problem as I've managed to get incetives elsewhere but it occured to me that, in terms of GDPR, this seems to go against the right to be forgotten.


    I've asked the information commissioner about this but it seems they are very busy so I thought I'd try here too.


    I am not currently a customer and this would be over six years ago, maybe seven or eight.I therefore don't see how they feel they are justified in keeping this data on file...
    Mixed Martial Arts is the greatest sport known to mankind and anyone who says it is 'a bar room brawl' has never trained in it and has no idea what they are talking about.
Page 1
    • zx81
    • By zx81 11th Jul 19, 5:05 AM
    • 23,311 Posts
    • 25,862 Thanks
    zx81
    • #2
    • 11th Jul 19, 5:05 AM
    • #2
    • 11th Jul 19, 5:05 AM
    The right to be forgotten is a specific right you need to exercise. When did you ask them to forget you? Did you get confirmation at the time?

    If you actually mean their data retention periods, it's not unreasonable to retain data that has a direct commercial impact for several years. There is also of course their legal obligations to consider.

    Your starting point is to refer to their privacy policy, which should outline retention periods.
    Last edited by zx81; 11-07-2019 at 7:18 AM.
    • Willing2Learn
    • By Willing2Learn 11th Jul 19, 5:18 AM
    • 3,815 Posts
    • 3,405 Thanks
    Willing2Learn
    • #3
    • 11th Jul 19, 5:18 AM
    • #3
    • 11th Jul 19, 5:18 AM
    According to the HSBC data retention policy,
    Risk management:
    we’ll use your information to measure, detect and prevent the likelihood of financial, reputational, legal, compliance or customer risk. This includes credit risk, traded risk, operational risk and insurance risk (e.g. for underwriting or claims management purposes). We’ll do this because we have a legitimate interest in ensuring that we carry out a proper risk assessment prior to providing credit, insurance or other finance
    So they are basically holding on to your data in order to help assess commercial risk...

    https://www.hsbc.co.uk/content/dam/hsbc/gb/pdf/privacy-notice2.pdf
    Last edited by Willing2Learn; 11-07-2019 at 7:15 AM. Reason: Added link
    I work within the voluntary sector, supporting vulnerable people to rebuild their lives.

    I love my job

    • gt94sss2
    • By gt94sss2 11th Jul 19, 7:17 AM
    • 4,289 Posts
    • 2,027 Thanks
    gt94sss2
    • #4
    • 11th Jul 19, 7:17 AM
    • #4
    • 11th Jul 19, 7:17 AM
    I applied a while ago to take advantage of a HSBC switching incentive. After some confusion because I'd had an account before and a lot of wasted time they ultimately wrote to me to say as their records showed I'd had money written off, and they have a policy of not offering current accounts to people who have had a balance owing to them written off they had declined the

    Now it's not a problem as I've managed to get incetives elsewhere but it occured to me that, in terms of GDPR, this seems to go against the right to be forgotten

    I am not currently a customer and this would be over six years ago, maybe seven or eight.I therefore don't see how they feel they are justified in keeping this data on file...
    Originally posted by davidgmmafan
    HSBC have the right to keep this sort of information on their current/former customers for their own purposes. It’s nothing to do with the right to be forgotten which is mainly to stop things appearing in public/search engines.

    HSBC are not making this information publicly available - it would have been recorded on your credit files and deleted after 6 years so other firms now don’t have access to it, but HSBC will always know they had a bad experience with you and that can influence their own decision making.
    • Gary_Dexter
    • By Gary_Dexter 11th Jul 19, 8:30 AM
    • 5,862 Posts
    • 3,864 Thanks
    Gary_Dexter
    • #5
    • 11th Jul 19, 8:30 AM
    • #5
    • 11th Jul 19, 8:30 AM
    HSBC have the right to keep this sort of information on their current/former customers for their own purposes. It’s nothing to do with the right to be forgotten which is mainly to stop things appearing in public/search engines.

    HSBC are not making this information publicly available - it would have been recorded on your credit files and deleted after 6 years so other firms now don’t have access to it, but HSBC will always know they had a bad experience with you and that can influence their own decision making.
    Originally posted by gt94sss2
    This ^^^

    GDPR and "the right to be forgotten" is not a get out of jail free card for previous wrong doings.

    If an organisation wishes to "blacklist" you and hold information that supports that decision, especially in the financial industry, then it's perfectly legal to do so.
    • Ergates
    • By Ergates 11th Jul 19, 8:37 AM
    • 533 Posts
    • 717 Thanks
    Ergates
    • #6
    • 11th Jul 19, 8:37 AM
    • #6
    • 11th Jul 19, 8:37 AM
    [Edited] list from the ICO:
    https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/


    When does the right to erasure apply?
    Individuals have the right to have their personal data erased if:
    • the personal data is no longer necessary for the purpose which you originally collected or processed it for;
      ....
    • you are relying on legitimate interests as your basis for processing, the individual objects to the processing of their data, and there is no overriding legitimate interest to continue this processing;

    HSBC have a legitimate interest in keeping track of customers they consider to be a credit risk, therefore right to erasure would not apply here.
    • sazaccount
    • By sazaccount 11th Jul 19, 9:55 PM
    • 355 Posts
    • 359 Thanks
    sazaccount
    • #7
    • 11th Jul 19, 9:55 PM
    • #7
    • 11th Jul 19, 9:55 PM
    Not sure if it help but when I went to do a switch to Natwest in February, I found I had a "block" to having an overdraft I hadn't held an account with Natwest since around 2004!! turns out that because I had a young persons account they used to use the z condition with stopped any over charges/overdraft from being applied and in the shop I was told I would have to take in paper copies of 3 months worth of payslips (I had digital copies on my phone but they wouldn't accept them) lots of frustration later and a trip to another branch they were able to get the account open. So they had held data on me for 15 years!!!! and yes this is legal for them to hold onto this type of data I asked!
    • johnsmith1890
    • By johnsmith1890 11th Jul 19, 10:07 PM
    • 545 Posts
    • 442 Thanks
    johnsmith1890
    • #8
    • 11th Jul 19, 10:07 PM
    • #8
    • 11th Jul 19, 10:07 PM
    Not sure if it help but when I went to do a switch to Natwest in February, I found I had a "block" to having an overdraft I hadn't held an account with Natwest since around 2004!! turns out that because I had a young persons account they used to use the z condition with stopped any over charges/overdraft from being applied and in the shop I was told I would have to take in paper copies of 3 months worth of payslips (I had digital copies on my phone but they wouldn't accept them) lots of frustration later and a trip to another branch they were able to get the account open. So they had held data on me for 15 years!!!! and yes this is legal for them to hold onto this type of data I asked!
    Originally posted by sazaccount

    It is legal, as you say. The reason for its legality is that the waste of space known as the ICO allows banks and other organisations to keep personal data "for as long as necessary", without requiring them to state what the necessity is.
    • sazaccount
    • By sazaccount 11th Jul 19, 11:21 PM
    • 355 Posts
    • 359 Thanks
    sazaccount
    • #9
    • 11th Jul 19, 11:21 PM
    • #9
    • 11th Jul 19, 11:21 PM
    It is legal, as you say. The reason for its legality is that the waste of space known as the ICO allows banks and other organisations to keep personal data "for as long as necessary", without requiring them to state what the necessity is.
    Originally posted by johnsmith1890
    Yep, they used some excuse about "responsible lending" and other buzz words in the first branch saying they were unable to remove this condition, which just made me laugh as 3 months before I was accepted for an amex gold with a 6000 limit, and not waiting to hear that i was no longer 16 and held a full time job while also living with my parents and only wanted a 300 overdraft for those times you forget about a DD or something similar.

    Next branch took it of then and there, and I was automatically offered a 3K overdraft
    Thanks to money saving tips and debt repayments/becoming debt free I have been able to work and travel for the last 4 years visiting 12 countries and working within 3 of them. Currently living and working in Canada
    • Carrot007
    • By Carrot007 11th Jul 19, 11:40 PM
    • 2,475 Posts
    • 2,141 Thanks
    Carrot007
    I was told I would have to take in paper copies of 3 months worth of payslips (I had digital copies on my phone but they wouldn't accept them)
    Originally posted by sazaccount

    And that's the crazy bit.


    Surely they would accept digital copies from somwehere? Maybe downloading them in front of them?


    But some banks eh? Stuck in the stone age.


    I have not had a paper copy of a payslip in (goes to check...), well since april 2011. They also cannot be provided either. Well beyond the point I can print them at work. I can also do that at home though.


    Still whats the differenec. My palslips back in the day were much the same as I could print out now and just as easily forgable as digital ones. In fact probably easier for most people.
    • Ergates
    • By Ergates 12th Jul 19, 8:23 AM
    • 533 Posts
    • 717 Thanks
    Ergates
    It is legal, as you say. The reason for its legality is that the waste of space known as the ICO allows banks and other organisations to keep personal data "for as long as necessary", without requiring them to state what the necessity is.
    Originally posted by johnsmith1890
    Companies are required to give the reason for holding onto data if challenged. The ICO don't go round randomly asking companies why they're keeping data because that would be a massive waste of public money - they lay out what companies *aren't* allowed to keep data for, and then deal with complaints/issues as and when they arise.
    • Flobberchops
    • By Flobberchops 12th Jul 19, 12:06 PM
    • 1,099 Posts
    • 1,003 Thanks
    Flobberchops
    Step 1: Take out 30,000 bank loan
    Step 2: Invoke Right To Be Forgotten
    Step 3: Bank now has none of my details on file and has no legal means to pursue repayment
    Step 4: See Step 1


    Genius!
    I work for a UK bank, but any comments made on this forum are solely my personal opinion. Caveat Emptor!
Welcome to our new Forum!

Our aim is to save you money quickly and easily. We hope you like it!

Forum Team Contact us

Live Stats

1,999Posts Today

5,703Users online

Martin's Twitter