Received personal data from financial institution in respect of other people

elacsaplau

Registered User
Messages
892
Hi All,

I received personal data from a financial institution in respect of two other people.

What is the appropriate course of action?

Do I report it to the errant company - and is it obliged to then report it to the Data Protection Commission? or
Should I report it directly to the DPC?

Any guidance appreciated!
 
I'd certainly report it to the company involved, they then have a legal obligation to inform the DPC.

If you don't trust them to do that, you could also alert the DPC.
 
Are they strangers to you or are they, in some way, connected to you?

If not, I would notify the company, the DPC and, if you have contact details, the people whose data was disclosed to you.
 
Back
Top