Is my information being handled correctly?
Yes. In our view, individuals should generally expect that an organisation will keep a record of the communications. This could be by recording calls, making notes and other account process applications. Businesses are bound by law to keep a financial record of 6 years.
How long can an organisation hold data about me?
The Data Protection Act states that organisations should only keep personal data for
as long as it is necessary. Organisations should also have a retention policy
for the information they hold.
Can an organisation use my information or pass it on without my consent?
If you think your information has been used unfairly, you should first approach the organisation involved, asking them to explain how they have used your information and how they have followed the Data Protection Act principles. Organisations are obliged to explain how they are processing your personal information if you make a formal request.
How do I get information held about me corrected?
If you have any concerns about the accuracy of your personal data, you will need to raise it in writing with the organisation concerned. You should be clear about exactly what you believe is inaccurate and how the organisation should correct it, providing evidence of the inaccuracies where available. Be aware that the Data Protection Act only obliges organisations to keep information factually accurate, it can't be used to alter or remove opinions, including medical diagnoses, unless those opinions themselves are based on inaccurate factual information.
How do I get an organisation to stop using my data?
Under the Data Protection Act, you may ask an organisation to stop using your information.
How do I get information held about me deleted?
You do not have an automatic right to have personal data deleted. However, you may ask an organisation to stop using your information.