Accountant sent me someone elses details
Accountant sent me someone elses details
Author
Discussion

cheeky_chops

Original Poster:

1,648 posts

280 months

Wednesday 13th November 2019
quotequote all
I started my ltd company in the summer with a large online accountant. Long story short, for personal reasons I am moving to a local account.

Anyway, ive requested by email my Companies CAC code and PAYE references numerous time. Ive called, no call back. Ive called back again and finally got someone who gave the info to me which I passed to my new accountant. Then next day they send a headed letter with all the codes again so forward that to accountant too. New accountant comes back - "none of the codes match previous set so don't know which to use/right/wrong...." FFS!

Called old accountant and had a rant. They have now confirmed that I should delete all previous comms and they are investigating.... Apart from being glad to move, who knows who else might have been sent mine/others PAYE and company details? Could someone access my company financials/PAYE info from this? Should I be doing anything else here? Seems to also be a data breach.

I joked with my new accountant yesterday that the old accountants signature was "..... semi-senior accountant" but it really is true!!

OMITN

3,051 posts

121 months

Wednesday 13th November 2019
quotequote all
On the face of it, it is a data breach sending the wrong information to you. It's their problem, but you should definitely delete the incorrect data sent to you. And ensure that your new accountant does the same.

In terms of finding out whether your information has been incorrectly disclosed at any time, you can send in a Data Subject Access Request (DSAR) to the old accountants. They have a period of time to respond to you.

HootersGsy

738 posts

165 months

Wednesday 13th November 2019
quotequote all
OMITN said:
On the face of it, it is a data breach sending the wrong information to you. It's their problem, but you should definitely delete the incorrect data sent to you. And ensure that your new accountant does the same.

In terms of finding out whether your information has been incorrectly disclosed at any time, you can send in a Data Subject Access Request (DSAR) to the old accountants. They have a period of time to respond to you.
I could be wrong as I'm no Data Protection expert but are SARs not only for personal data? The OP was talking about company details.

cheeky_chops

Original Poster:

1,648 posts

280 months

Wednesday 13th November 2019
quotequote all
theyve send me someone elses PAYE details so that would seem to be personal data

Theyve also called my new accountant, in a bit of a tizz about it all, so they must be v aware of the problem! She said get onto them with a GDPR complaint - might just be a small sloppy mgmt issue this time, what next....

Edited by cheeky_chops on Wednesday 13th November 22:01

OMITN

3,051 posts

121 months

Thursday 14th November 2019
quotequote all
HootersGsy said:
I could be wrong as I'm no Data Protection expert but are SARs not only for personal data? The OP was talking about company details.
You’re right: DSARs are for personal data only.

JulianPH

10,084 posts

143 months

Thursday 14th November 2019
quotequote all
Yes, SARs only apply to personal data that a company hold on you.

You say the accountant sent you someone else's details, do you mean someone else's random tax code, or their personal details?

The former is a stupid mistake, the later is a breach of GDPR.