FSPO complaint - GDPR non compliance by bank

cmalone

Frequent Poster
Messages
278
came across scenario where complaint lodged to FSPO and bank provides evidence from their files, that was not released / denied existed under Data Protection Act Request.

How would the FSPO determine such a case ?
 

WhiteCoat

Frequent Poster
Messages
67
Hi cmalone,

I'm sorry I can't help with your specific query but it does seem a common enough theme for banks to have "lost" key correspondence or not provided all details under data disclosure. Personally, I am highly suspicious that this is just a coincidence.

I have two disputed loans - one of which has gone through the FSPO process, the other is still in the oven. Whilst I "won" the completed one, I found the FSPO staff well intended but weak.
 

cmalone

Frequent Poster
Messages
278
Agree with that analysis. Similar weaknesses with Data Protection Commissioner’s Office due to backlog of cases ... the bank’s know to ‘play the game’ and they can say what they want..

in this instance the bank’s management claimed to DPC that important documentation/ notes on file regarding customer instructions were temporary in nature (post its/ verbal messages) and were not available ...

Fortunately the customer was able to show that the call centre staff actually sent emails to relevant departments per recorded calls and did not use post-it’s!
 

Metatron

Registered User
Messages
41
Agree with that analysis. Similar weaknesses with Data Protection Commissioner’s Office due to backlog of cases ... the bank’s know to ‘play the game’ and they can say what they want..

in this instance the bank’s management claimed to DPC that important documentation/ notes on file regarding customer instructions were temporary in nature (post its/ verbal messages) and were not available ...

Fortunately the customer was able to show that the call centre staff actually sent emails to relevant departments per recorded calls and did not use post-it’s!
Hi cmalone,

What happened next, did the Bank get sanctioned?
 

cmalone

Frequent Poster
Messages
278
The process with ODPC and FSPO takes years. They are slow to act - possibly due this the large fees that pay their salaries from the banks. At each occasion when bank is proven to have intentionally misled the investigation, they simply claim that now the bank has corrected the error. Fortunately - one learns to be persistent
 

Metatron

Registered User
Messages
41
The process with ODPC and FSPO takes years. They are slow to act - possibly due this the large fees that pay their salaries from the banks. At each occasion when bank is proven to have intentionally misled the investigation, they simply claim that now the bank has corrected the error. Fortunately - one learns to be persistent
Hi CMalone,
are are kidding me; it could not take years for the FSPO to adjudicate on a complaint, could it?
 

Leo

Moderator
Messages
10,417
Fortunately the customer was able to show that the call centre staff actually sent emails to relevant departments per recorded calls and did not use post-it’s!
Just playing devil's advocate, but an audio recording stating an email was sent does not mean that record of that email still exists. How long ago are you talking about? Most companies will delete emails after the mandatory retention period unless they are explicitly archived.
 

cmalone

Frequent Poster
Messages
278
The requests for data were made in 2016 and follow up requests in 2017 , 2018 and 2019. The Data Protection Commissioner has been actively investigating case with bank since 2017 to present and can only obtain data on a piecemeal basis. The bank would have an internal communication system to communicate with staff regarding phone call follow up. This would typically be by internal system email etc.
 
Top