GDPR subject access request
Discussion
Is it normal to require certified copies of documents to confirm identity to support a GDPR subject access request and deter such requests?
I have recently placed a request with a well-known sportswear retailer I have used in the past as I have read negative comments in the media about their corporate ethics and data handling policies and would like to be certain my data is not being misused.
They have replied requesting certified copies of documentation. I understand they need to confirm my identity, but certified copies are time-consuming to obtain and there are costs involved, I'll get these if I need to but I'm concerned they are simply doing anything they can to get me to give up with the process and will make me jump through further hoops and incur further costs if I provide this.
I have recently placed a request with a well-known sportswear retailer I have used in the past as I have read negative comments in the media about their corporate ethics and data handling policies and would like to be certain my data is not being misused.
They have replied requesting certified copies of documentation. I understand they need to confirm my identity, but certified copies are time-consuming to obtain and there are costs involved, I'll get these if I need to but I'm concerned they are simply doing anything they can to get me to give up with the process and will make me jump through further hoops and incur further costs if I provide this.
Don't ask on here. Go to: https://ico.org.uk
Give the company name, the date of your application and all that stuff and the full details of what they have requested. Put a simple question and it will be answered. It might be prefixed by a condition: 'we think'.
I use them a bit and the response time has been quite good. Within a week is the norm for me. Their search facility is good, although you will get a high number of returns.
Give the company name, the date of your application and all that stuff and the full details of what they have requested. Put a simple question and it will be answered. It might be prefixed by a condition: 'we think'.
I use them a bit and the response time has been quite good. Within a week is the norm for me. Their search facility is good, although you will get a high number of returns.
https://ico.org.uk/for-organisations/guide-to-the-...
Do what Derek said, not least because then you can tell them that you've contacted the ICO who have said <whatever>, but certainly that doesn't appear to be within the spirit of the regulations.
Do what Derek said, not least because then you can tell them that you've contacted the ICO who have said <whatever>, but certainly that doesn't appear to be within the spirit of the regulations.
They are just trying to pull a fast one...
I've had a company demand that I submit a written request in the language of their country, sent by courier, and they will make an appointment for me to come in personally and verify my identity, only to backpedal when I replied and CC'ed in their ICO
I've had a company demand that I submit a written request in the language of their country, sent by courier, and they will make an appointment for me to come in personally and verify my identity, only to backpedal when I replied and CC'ed in their ICO
Gassing Station | Speed, Plod & the Law | Top of Page | What's New | My Stuff