I issued a SARN to the solictor acting on behalf of the Mort Co and have received the following reply

"We have reviewed the matter and write to advise that, in this instance, we do not hold any personal data relating to you as data controller. As we only process personal data relating to you on behalf of our client xxx we are therefore not subject to the provisions of the Act relating to release of personal data in relation to a subject access request."

They then go on to say that they have spoken with their client and suggest that I contact them directly.

I dont think that this is right, so can anyone point me in the right direction and/or provide a draft of a letter that thwarts them in this attempt ?

Regards

John

-- John (sharky_john@hotmail.com), March 19, 2002

Answers

I would suggest that you discuss this with the Information Commisisoners on 01625-545700.

They will advise you if this is right. I suspect that they will ask you to issue a SARN against the other company, but they might also ask you to send in an assessment request.

This is free, the IC are helpful, the IC are the Sun-Source of information about the Data Protection Act. Do it.

Good Luck.

-- Harry (pearson_harry@hotmail.com), March 19, 2002.

Update,

Just spoke to the IC and they have requested that I complete an assessment form as they are going to investigate my allegations. More later

John

-- John (sharky_john@hotmail.com), March 27, 2002.