Are comparethemarket etc. GDPR compliant?
Discussion
I submitted a quote for life insurance through comparethemarket, explicitly stating that I did not wish to be contacted by any means about the quotes received.
Days later I receive a call from Lifesearch, telling me they were given my details by comparethemarket. Is this GDPR compliant?
Furthermore Lifesearch ignored two requests to be removed from their database, on each occasion becoming rude and aggressive when I expressed frustration about them cold calling me. I have submitted a right to be forgotten request, but received no response.
What's the appropriate escalation pathway here?
Days later I receive a call from Lifesearch, telling me they were given my details by comparethemarket. Is this GDPR compliant?
Furthermore Lifesearch ignored two requests to be removed from their database, on each occasion becoming rude and aggressive when I expressed frustration about them cold calling me. I have submitted a right to be forgotten request, but received no response.
What's the appropriate escalation pathway here?
These are very, very big businesses so they will be GDPR compliant. However, that’s not to say occasional mistakes won’t happen. Every single entity makes mistakes, so it’s quite a leap to suggest that this is somehow a systemic failure.
You might want to brush up on your knowledge of what “right to be forgotten” means as well.
You might want to brush up on your knowledge of what “right to be forgotten” means as well.
graylag said:
These are very, very big businesses so they will be GDPR compliant. However, that’s not to say occasional mistakes won’t happen. Every single entity makes mistakes, so it’s quite a leap to suggest that this is somehow a systemic failure.
You might want to brush up on your knowledge of what “right to be forgotten” means as well.
Really? just because they are a big business does not mean they are complaint, it is similar to saying Facebook is big and therefore must be "compliant" and look where that got us...What you really mean is there will be policies and procedures in place that aim to minimise the potential of PII being exposed, there will always be the potential to PII being exposed.You might want to brush up on your knowledge of what “right to be forgotten” means as well.
I equally question some "views/statements" and one company completely failing in terms of timescale as a data controller following making a SAR to them (some of which are household names and equally some are not).
I do not deny the next bit regarding the mistakes though.
I think you might be directing the criticism at Comparethemarket unfairly.
They do need to submit your information to insurance companies so those companies can provide quotes.
They will also have sent through whether you selected the option to be contacted or not.
My guess is that this company that keeps cold calling you is ignoring the rules; report them to Information Commissioners Office (ICO) and also report it to ComparetheMarket; since this company is probabaly violating agreements with them on how they use CTM's customer data.
They do need to submit your information to insurance companies so those companies can provide quotes.
They will also have sent through whether you selected the option to be contacted or not.
My guess is that this company that keeps cold calling you is ignoring the rules; report them to Information Commissioners Office (ICO) and also report it to ComparetheMarket; since this company is probabaly violating agreements with them on how they use CTM's customer data.
graylag said:
These are very, very big businesses so they will be GDPR compliant. However, that’s not to say occasional mistakes won’t happen. Every single entity makes mistakes, so it’s quite a leap to suggest that this is somehow a systemic failure.
You might want to brush up on your knowledge of what “right to be forgotten” means as well.
My understanding was that permission to share my information with third parties could form part of the terms and conditions of comparethemarket (for legitimate data processing purposes), but I explicitly opted out of being contacted by those third parties.You might want to brush up on your knowledge of what “right to be forgotten” means as well.
It is likely therefore that Lifesearch are at fault?
My request to the lifesearch was to no longer be contacted and to have my information removed from their systems, I believe this is within my rights as they have no other legitimate purpose for retaining my data.
I was also a little upset that when the sales rep threatened me by stating that I should go through their quote process because if I didn't, when I used another comparison site, I would be contacted again.
Esotericstuff said:
My understanding was that permission to share my information with third parties could form part of the terms and conditions of comparethemarket (for legitimate data processing purposes), but I explicitly opted out of being contacted by those third parties.
It is likely therefore that Lifesearch are at fault?
My request to the lifesearch was to no longer be contacted and to have my information removed from their systems, I believe this is within my rights as they have no other legitimate purpose for retaining my data.
I was also a little upset that when the sales rep threatened me by stating that I should go through their quote process because if I didn't, when I used another comparison site, I would be contacted again.
How did you expect to get a quote from them if you opted out of them contacting you?It is likely therefore that Lifesearch are at fault?
My request to the lifesearch was to no longer be contacted and to have my information removed from their systems, I believe this is within my rights as they have no other legitimate purpose for retaining my data.
I was also a little upset that when the sales rep threatened me by stating that I should go through their quote process because if I didn't, when I used another comparison site, I would be contacted again.
Doesn't really make sense.
Further to the above, I took the time to read the small print for compare the market and they are essentially a front for Lifesearch, as are money supermarket.
I guess that therefore Lifesearch are legitimate data processors. But the sales team are f@cking pricks. I guess this means GDPR is unlikely to be relevant.
I guess that therefore Lifesearch are legitimate data processors. But the sales team are f@cking pricks. I guess this means GDPR is unlikely to be relevant.
Esotericstuff said:
Further to the above, I took the time to read the small print for compare the market and they are essentially a front for Lifesearch, as are money supermarket.
I guess that therefore Lifesearch are legitimate data processors. But the sales team are f@cking pricks. I guess this means GDPR is unlikely to be relevant.
Compare the market don't sell insurance of any type. They are a lead generation firm.I guess that therefore Lifesearch are legitimate data processors. But the sales team are f@cking pricks. I guess this means GDPR is unlikely to be relevant.
Esotericstuff said:
I opted out of being contacted by the insurers. I just didn't want to be cold called during work by a prick from their sales team.
Surely that would be for the purposes of marketing rather than for the purposes of giving you a quote?Would be interested in seeing the clause anyway.
I used them a couple of years ago for research and have only just stopped getting messages now. w
kersdesolate said:
Compare the market don't sell insurance of any type. They are a lead generation firm.
My assumption here was that they would either work as an approved representative or broker, as they do with car and home insurance.
This would mean they receive a commission for any insurance purchased as an outcome of a quote. For life insurance they are a front for an intermediary. And have no direct relationship with the insurers they compare.
Esotericstuff said:
My assumption here was that they would either work as an approved representative or broker, as they do with car and home insurance.
This would mean they receive a commission for any insurance purchased as an outcome of a quote. For life insurance they are a front for an intermediary. And have no direct relationship with the insurers they compare.
Here's a top tip that i used to advise clients to advise their customers: Don't ask to be deleted from a database, but ask for a note to be added to the effect that you don't want to be contacted anymore.
If you wipe the slate clean, there's a chance you might end up back on the database again in the future, which will wind everyone up no end.
If you wipe the slate clean, there's a chance you might end up back on the database again in the future, which will wind everyone up no end.
Gassing Station | Speed, Plod & the Law | Top of Page | What's New | My Stuff